CVE-2026-78806

Published: Sep 21, 2026Modified: Sep 24, 2026Deferred

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (3)

https://csa-iot.org/developer-resource/specifications-download-request/

Source: cve@mitre.org

https://github.com/Anonymous241429/Matter

Source: cve@mitre.org

https://github.com/project-chip/connectedhomeip/

Source: cve@mitre.org

Timeline

No history available yet.