AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-19293

HIGH · CVSS 8.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-08-13 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability arises from the SMP security request failing to specify the maximum supported encryption key size, potentially allowing attackers to exploit weaker keys for brute-force attacks. This could compromise the confidentiality of sensitive data transmitted over affected products. Organizations utilizing devices that implement the SMP protocol should prioritize addressing this vulnerability to mitigate the risk of unauthorized access.

CVE
CVE-2026-19293
Severity
HIGH
CVSS
8.8
EPSS
0.13%

Original NVD Description

SMP security request (from peripheral) does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below.