CVE-2026-10676

Rejected reason: This CVE Record has been rejected by the Zephyr Project CNA. Subsequent analysis determined that the addressed defect is not reachable in any released version of Zephyr: on every supported release branch the affected value is corrected before it is used, and the change that exposes the defect exists only in unreleased development code. As no released version is affected, this identifier is withdrawn.

Published

Jun 12, 2026

Last Modified

Jun 12, 2026

Status

Rejected

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10670The CONFIG_USERSPACE verification handler for the k_thread_n…5.5
• CVE-2026-10671In Zephyr's kernel pipe implementation, the userspace syscal…7.1
• CVE-2026-10672subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmwar…9.1
• CVE-2026-10673The Zephyr ADIN2111/ADIN1110 10BASE-T1S/T1L Ethernet driver …8.3
• CVE-2026-10674The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuar…5.5
• CVE-2026-10675In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsy…6.5
• CVE-2026-10677The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in ker…6.5
• CVE-2026-10678The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci…8.1
• CVE-2026-10679The DesignWare SPI driver (drivers/spi/spi_dw.c) computed th…5.5
• CVE-2026-1068An improper certificate validation vulnerability was reporte…6
• CVE-2026-10680The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_…7.6
• CVE-2026-10681In Zephyr's userspace dynamic-objects subsystem, thread_idx_…7