Which versions of Bluetooth Mesh SDK are affected by CVE-2026-5706?

Silicon Labs Bluetooth Mesh SDK 6.1.4 and earlier expose provisioner nodes to remote compromise through malformed Bluetooth advertisements.. A patch is available.

How to fix or mitigate CVE-2026-5706?

Within 24 hours, identify all Silicon Labs Bluetooth Mesh SDK 6.1.4 and earlier installations, particularly those running as provisioner nodes with extended advertisement support enabled. Within 7 days, apply the vendor-released patch to upgrade all affected systems to the latest supported version. Within 30 days, complete a security audit of mesh provisioner configurations to disable extended advertisement support where not operationally required and confirm patch deployment across all assets.

Bluetooth Mesh SDK CVE-2026-5706

Q: What is the CVSS score of CVE-2026-5706?

CVE-2026-5706 has a CVSS 4.0 base score of 8.9 (High). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-67297 HIGH

Improper Handling of Length Parameter Inconsistency (CWE-130)

2026-08-27 Silabs

GHSA-f29w-mc54-fh2c

RCE Bt Mesh Sdk

8.9

CVSS 4.0 · Vendor: Silabs

Severity by source

Vendor (Silabs) PRIMARY

8.9 HIGH

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.3 HIGH

Adjacent vector for Bluetooth; AC:H captures the provisioning prerequisite; scope change reflects provisioner's authority over the broader mesh network.

3.1 AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

4.0 AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H

Primary rating from Vendor (Silabs).

CVSS VectorVendor: Silabs

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 28, 2026 - 00:02 vuln.today

CVE Published

Aug 27, 2026 - 22:13 cve.org

HIGH 8.9

DescriptionCVE.org

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may be impacted.

AnalysisAI

Remote code execution is possible in Silicon Labs Bluetooth Mesh SDK 6.1.4 and earlier through malformed Bluetooth extended advertisements that trigger out-of-bounds writes and stack corruption. The vulnerability is reachable only from devices already provisioned into the target mesh network, and only on provisioner nodes that have enabled extended advertisement support. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Two specific conditions must both be satisfied. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 vector (AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H) scores 8.9, reflecting high impact but meaningful preconditions. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	The primary remediation is to upgrade to a patched release of the Silicon Labs Bluetooth Mesh SDK, available via the Gecko SDK GitHub releases page at https://github.com/SiliconLabs/gecko_sdk/releases. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all Silicon Labs Bluetooth Mesh SDK 6.1.4 and earlier installations, particularly those running as provisioner nodes with extended advertisement support enabled. …

Threat intelligence, references, and detailed analysis are available after sign-in.