CVE-2026-19741 | Zephyr Project up to 4.4.x OpenThread Joiner openthread.c ot_configure_instance hard-coded credentials

October 23, 2026 Yanac

A vulnerability labeled as very critical has been found in Zephyr Project Zephyr up to 4.4.x. This affects the function ot_configure_instance of the file modules/openthread/openthread.c of the component OpenThread Joiner. Executing a manipulation can lead to hard-coded credentials.

This vulnerability is handled as CVE-2026-19741. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More