Is CVE-2026-6924 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-6924 being exploited in the wild.

How severe is CVE-2026-6924?

Informational severity, with a CVSS score of 8.7, published 23 July 2026.

Which products and versions are affected?

Silicon Labs Matter GitHub Repository All versions prior to deprecation.

Is there a fix for CVE-2026-6924?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-6924 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-6924?

Check whether you run Silicon Labs Matter GitHub Repository at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-6924: Silicon Labs SiWx917 Predictable Seed in Matter DRBG

CVE-2026-6924 · Severity: info · CVSS 8.7 · Published 2026-07-23

A security flaw was identified in Silicon Labs SiWx917 devices using the Matter connectivity standard, where the system fails to generate truly random numbers. Because the system uses a predictable starting point for its random number generator, security features like encryption keys or session identifiers could be guessed by an attacker. This could allow unauthorized parties to intercept or decrypt communications between smart home devices.

Vendors: Silicon Labs.

Quick answers

Is CVE-2026-6924 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-6924 being exploited in the wild.
How severe is CVE-2026-6924?: Informational severity, with a CVSS score of 8.7, published 23 July 2026.
Which products and versions are affected?: Silicon Labs Matter GitHub Repository All versions prior to deprecation.
Is there a fix for CVE-2026-6924?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-6924 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-6924?: Check whether you run Silicon Labs Matter GitHub Repository at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability exists in the entropy initialization process for Silicon Labs SiWx917 hardware when utilizing the Matter protocol stack. The root cause is a failure to provide sufficient entropy to the Deterministic Random Bit Generator (DRBG), leading to the use of a predictable seed (CWE-336). Consequently, all cryptographic operations or protocol functions relying on the PRNG in the Matter code use a predictable stream of numbers. An attacker could exploit this over the network to predict sensitive values such as cryptographic keys or nonces. The vulnerability was identified in a repository that has since been deprecated.

Affected products

Silicon Labs Matter GitHub Repository All versions prior to deprecation

Timeline

2026-07-23: advisory: CVE-2026-6924 published by Silicon Labs

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.