CVE-2026-5706: Silicon Labs Bt Mesh SDK

High severity, CVSS 8.9. EPSS: 0.4% chance of exploitation in the next 30 days.

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may be impacted.

Affected products

• Silicon Labs Bt Mesh SDK

Published 2026-08-28. Last modified 2026-09-08.