CVE-2026-19735 | Zephyr Project up to 4.4.2 TCP ISN Implementation subsys/net/ip/tcp.c tcp_init_isn random values

October 11, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Zephyr Project Zephyr up to 4.4.2. This issue affects the function tcp_init_isn of the file subsys/net/ip/tcp.c of the component TCP ISN Implementation. Performing a manipulation results in insufficiently random values.

This vulnerability is cataloged as CVE-2026-19735. It is possible to initiate the attack remotely. There is no exploit available.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More