{
    "document": {
        "category": "csaf_base",
        "csaf_version": "2.0",
        "distribution": {
            "tlp": {
                "label": "WHITE"
            }
        },
        "lang": "en",
        "notes": [
            {
                "category": "legal_disclaimer",
                "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
            }
        ],
        "publisher": {
            "category": "coordinator",
            "contact_details": "cert@ncsc.nl",
            "name": "National Cyber Security Centre",
            "namespace": "https://www.ncsc.nl/"
        },
        "title": "CVE-2026-10666",
        "tracking": {
            "current_release_date": "2026-09-06T15:02:32.575870Z",
            "generator": {
                "date": "2026-02-17T15:00:00Z",
                "engine": {
                    "name": "V.E.L.M.A",
                    "version": "1.7"
                }
            },
            "id": "CVE-2026-10666",
            "initial_release_date": "2026-07-12T16:52:09.715968Z",
            "revision_history": [
                {
                    "date": "2026-07-12T16:52:09.715968Z",
                    "number": "1",
                    "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (3).| CWES updated (1)."
                },
                {
                    "date": "2026-07-12T16:52:23.195378Z",
                    "number": "2",
                    "summary": "NCSC Score created."
                },
                {
                    "date": "2026-07-12T17:25:09.804357Z",
                    "number": "3",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (3).| CWES updated (1)."
                },
                {
                    "date": "2026-07-12T17:25:15.910936Z",
                    "number": "4",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-07-13T06:42:39.228441Z",
                    "number": "5",
                    "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (155).| References created (5).| CWES updated (1)."
                },
                {
                    "date": "2026-07-13T06:42:57.597042Z",
                    "number": "6",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-07-13T07:35:33.862385Z",
                    "number": "7",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-07-13T17:04:55.564601Z",
                    "number": "8",
                    "summary": "Unknown change."
                },
                {
                    "date": "2026-07-13T18:29:57.178025Z",
                    "number": "9",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-07-13T18:30:06.441982Z",
                    "number": "10",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-07-14T06:40:28.689822Z",
                    "number": "11",
                    "summary": "Products connected (1)."
                },
                {
                    "date": "2026-07-14T20:04:28.214291Z",
                    "number": "12",
                    "summary": "CWES updated (1)."
                },
                {
                    "date": "2026-07-14T20:04:37.854155Z",
                    "number": "13",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-07-14T20:12:51.632607Z",
                    "number": "14",
                    "summary": "CWES updated (1)."
                },
                {
                    "date": "2026-07-15T09:06:51.763386Z",
                    "number": "15",
                    "summary": "CWES updated (1)."
                },
                {
                    "date": "2026-07-17T14:23:56.744379Z",
                    "number": "16",
                    "summary": "Products created (1).| Product Identifiers created (1).| Exploits created (1)."
                },
                {
                    "date": "2026-07-17T14:23:59.155903Z",
                    "number": "17",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-07-19T06:23:18.625257Z",
                    "number": "18",
                    "summary": "Products removed (1)."
                },
                {
                    "date": "2026-07-19T06:23:37.290456Z",
                    "number": "19",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-07-24T15:24:37.676864Z",
                    "number": "20",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-07-24T15:24:39.051890Z",
                    "number": "21",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-08-11T15:11:52.650910Z",
                    "number": "22",
                    "summary": "Source connected.| CVE status created. (valid)| EPSS created."
                },
                {
                    "date": "2026-08-11T15:13:12.938779Z",
                    "number": "23",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-08-24T15:57:56.130433Z",
                    "number": "24",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-08-24T15:57:57.825348Z",
                    "number": "25",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-09-02T10:45:45.908465Z",
                    "number": "26",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-02T10:45:46.911154Z",
                    "number": "27",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-09-03T14:38:15.847550Z",
                    "number": "28",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-03T19:01:41.339248Z",
                    "number": "29",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-04T07:45:28.501135Z",
                    "number": "30",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-09-04T15:47:41.837151Z",
                    "number": "31",
                    "summary": "EPSS updated."
                },
                {
                    "date": "2026-09-05T03:59:23.749299Z",
                    "number": "32",
                    "summary": "NCSC Score updated."
                },
                {
                    "date": "2026-09-05T15:45:34.155655Z",
                    "number": "33",
                    "summary": "EPSS updated."
                }
            ],
            "status": "interim",
            "version": "33"
        }
    },
    "product_tree": {
        "branches": [
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:semver/1.9.0|<4.5.0",
                                "product": {
                                    "name": "vers:semver/1.9.0|<4.5.0",
                                    "product_id": "CSAFPID-8708769"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/>=1.9.0|<=4.4.1",
                                "product": {
                                    "name": "vers:unknown/>=1.9.0|<=4.4.1",
                                    "product_id": "CSAFPID-8852464",
                                    "product_identification_helper": {
                                        "cpe": "cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:*"
                                    }
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "Zephyr"
                    }
                ],
                "category": "vendor",
                "name": "Zephyrproject"
            },
            {
                "branches": [
                    {
                        "branches": [
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.0.0",
                                "product": {
                                    "name": "vers:unknown/v1.0.0",
                                    "product_id": "CSAFPID-5591523"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.1.0",
                                "product": {
                                    "name": "vers:unknown/v1.1.0",
                                    "product_id": "CSAFPID-5591524"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.1.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v1.1.0-rc1",
                                    "product_id": "CSAFPID-5591525"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.10.0",
                                "product": {
                                    "name": "vers:unknown/v1.10.0",
                                    "product_id": "CSAFPID-5591526"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.10.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v1.10.0-rc1",
                                    "product_id": "CSAFPID-5591527"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.10.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v1.10.0-rc2",
                                    "product_id": "CSAFPID-5591528"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.10.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v1.10.0-rc3",
                                    "product_id": "CSAFPID-5591529"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.11.0",
                                "product": {
                                    "name": "vers:unknown/v1.11.0",
                                    "product_id": "CSAFPID-5591530"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.11.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v1.11.0-rc1",
                                    "product_id": "CSAFPID-5591531"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.11.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v1.11.0-rc2",
                                    "product_id": "CSAFPID-5591532"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.11.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v1.11.0-rc3",
                                    "product_id": "CSAFPID-5591533"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.12.0",
                                "product": {
                                    "name": "vers:unknown/v1.12.0",
                                    "product_id": "CSAFPID-5591534"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.12.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v1.12.0-rc1",
                                    "product_id": "CSAFPID-5591535"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.12.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v1.12.0-rc2",
                                    "product_id": "CSAFPID-5591536"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.12.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v1.12.0-rc3",
                                    "product_id": "CSAFPID-5591537"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.13.0",
                                "product": {
                                    "name": "vers:unknown/v1.13.0",
                                    "product_id": "CSAFPID-5591538"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.13.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v1.13.0-rc1",
                                    "product_id": "CSAFPID-5591539"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.13.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v1.13.0-rc2",
                                    "product_id": "CSAFPID-5591540"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.13.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v1.13.0-rc3",
                                    "product_id": "CSAFPID-5591541"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.14.0",
                                "product": {
                                    "name": "vers:unknown/v1.14.0",
                                    "product_id": "CSAFPID-689679"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.14.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v1.14.0-rc1",
                                    "product_id": "CSAFPID-5591542"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.14.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v1.14.0-rc2",
                                    "product_id": "CSAFPID-5591543"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.14.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v1.14.0-rc3",
                                    "product_id": "CSAFPID-5591544"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.2.0",
                                "product": {
                                    "name": "vers:unknown/v1.2.0",
                                    "product_id": "CSAFPID-5591545"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.2.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v1.2.0-rc1",
                                    "product_id": "CSAFPID-5591546"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.2.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v1.2.0-rc2",
                                    "product_id": "CSAFPID-5591547"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.3.0",
                                "product": {
                                    "name": "vers:unknown/v1.3.0",
                                    "product_id": "CSAFPID-5591548"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.3.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v1.3.0-rc1",
                                    "product_id": "CSAFPID-5591549"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.3.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v1.3.0-rc2",
                                    "product_id": "CSAFPID-5591550"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.4.0",
                                "product": {
                                    "name": "vers:unknown/v1.4.0",
                                    "product_id": "CSAFPID-5591551"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.4.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v1.4.0-rc1",
                                    "product_id": "CSAFPID-5591552"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.4.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v1.4.0-rc2",
                                    "product_id": "CSAFPID-5591553"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.4.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v1.4.0-rc3",
                                    "product_id": "CSAFPID-5591554"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.5.0",
                                "product": {
                                    "name": "vers:unknown/v1.5.0",
                                    "product_id": "CSAFPID-5591555"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.5.0-rc0",
                                "product": {
                                    "name": "vers:unknown/v1.5.0-rc0",
                                    "product_id": "CSAFPID-5591556"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.5.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v1.5.0-rc1",
                                    "product_id": "CSAFPID-5591557"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.5.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v1.5.0-rc2",
                                    "product_id": "CSAFPID-5591558"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.5.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v1.5.0-rc3",
                                    "product_id": "CSAFPID-5591559"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.5.0-rc4",
                                "product": {
                                    "name": "vers:unknown/v1.5.0-rc4",
                                    "product_id": "CSAFPID-5591560"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.6.99",
                                "product": {
                                    "name": "vers:unknown/v1.6.99",
                                    "product_id": "CSAFPID-5591561"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.7.99",
                                "product": {
                                    "name": "vers:unknown/v1.7.99",
                                    "product_id": "CSAFPID-5591562"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.8.99",
                                "product": {
                                    "name": "vers:unknown/v1.8.99",
                                    "product_id": "CSAFPID-5591563"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.9.0",
                                "product": {
                                    "name": "vers:unknown/v1.9.0",
                                    "product_id": "CSAFPID-5591564"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.9.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v1.9.0-rc1",
                                    "product_id": "CSAFPID-5591565"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.9.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v1.9.0-rc2",
                                    "product_id": "CSAFPID-5591566"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.9.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v1.9.0-rc3",
                                    "product_id": "CSAFPID-5591567"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v1.9.0-rc4",
                                "product": {
                                    "name": "vers:unknown/v1.9.0-rc4",
                                    "product_id": "CSAFPID-5591568"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.0.0",
                                "product": {
                                    "name": "vers:unknown/v2.0.0",
                                    "product_id": "CSAFPID-5591569"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.0.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v2.0.0-rc1",
                                    "product_id": "CSAFPID-5591570"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.0.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v2.0.0-rc2",
                                    "product_id": "CSAFPID-5591571"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.0.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v2.0.0-rc3",
                                    "product_id": "CSAFPID-5591572"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.1.0",
                                "product": {
                                    "name": "vers:unknown/v2.1.0",
                                    "product_id": "CSAFPID-5591573"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.1.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v2.1.0-rc1",
                                    "product_id": "CSAFPID-5591574"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.1.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v2.1.0-rc2",
                                    "product_id": "CSAFPID-5591575"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.1.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v2.1.0-rc3",
                                    "product_id": "CSAFPID-5591576"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.2.0",
                                "product": {
                                    "name": "vers:unknown/v2.2.0",
                                    "product_id": "CSAFPID-533195"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.2.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v2.2.0-rc1",
                                    "product_id": "CSAFPID-5591577"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.2.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v2.2.0-rc2",
                                    "product_id": "CSAFPID-5591578"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.2.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v2.2.0-rc3",
                                    "product_id": "CSAFPID-5591579"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.3.0",
                                "product": {
                                    "name": "vers:unknown/v2.3.0",
                                    "product_id": "CSAFPID-548245"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.3.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v2.3.0-rc1",
                                    "product_id": "CSAFPID-5591580"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.3.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v2.3.0-rc2",
                                    "product_id": "CSAFPID-5591581"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.4.0",
                                "product": {
                                    "name": "vers:unknown/v2.4.0",
                                    "product_id": "CSAFPID-687359"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.4.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v2.4.0-rc1",
                                    "product_id": "CSAFPID-5591582"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.4.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v2.4.0-rc2",
                                    "product_id": "CSAFPID-5591583"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.4.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v2.4.0-rc3",
                                    "product_id": "CSAFPID-5591584"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.5.0",
                                "product": {
                                    "name": "vers:unknown/v2.5.0",
                                    "product_id": "CSAFPID-689680"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.5.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v2.5.0-rc1",
                                    "product_id": "CSAFPID-5591585"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.5.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v2.5.0-rc2",
                                    "product_id": "CSAFPID-5591586"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.5.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v2.5.0-rc3",
                                    "product_id": "CSAFPID-5591587"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.5.0-rc4",
                                "product": {
                                    "name": "vers:unknown/v2.5.0-rc4",
                                    "product_id": "CSAFPID-5591588"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.6.0",
                                "product": {
                                    "name": "vers:unknown/v2.6.0",
                                    "product_id": "CSAFPID-689688"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.6.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v2.6.0-rc1",
                                    "product_id": "CSAFPID-5591589"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.6.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v2.6.0-rc2",
                                    "product_id": "CSAFPID-5591590"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.6.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v2.6.0-rc3",
                                    "product_id": "CSAFPID-5591591"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.7.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v2.7.0-rc1",
                                    "product_id": "CSAFPID-5591592"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.7.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v2.7.0-rc2",
                                    "product_id": "CSAFPID-5591593"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.7.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v2.7.0-rc3",
                                    "product_id": "CSAFPID-5591594"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v2.7.99",
                                "product": {
                                    "name": "vers:unknown/v2.7.99",
                                    "product_id": "CSAFPID-5591595"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.0.0",
                                "product": {
                                    "name": "vers:unknown/v3.0.0",
                                    "product_id": "CSAFPID-5591596"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.0.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v3.0.0-rc1",
                                    "product_id": "CSAFPID-5591597"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.0.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v3.0.0-rc2",
                                    "product_id": "CSAFPID-5591598"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.0.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v3.0.0-rc3",
                                    "product_id": "CSAFPID-5591599"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.1.0",
                                "product": {
                                    "name": "vers:unknown/v3.1.0",
                                    "product_id": "CSAFPID-5591600"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.1.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v3.1.0-rc1",
                                    "product_id": "CSAFPID-5591601"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.1.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v3.1.0-rc2",
                                    "product_id": "CSAFPID-5591602"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.1.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v3.1.0-rc3",
                                    "product_id": "CSAFPID-5591603"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.2.0",
                                "product": {
                                    "name": "vers:unknown/v3.2.0",
                                    "product_id": "CSAFPID-5591604"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.2.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v3.2.0-rc1",
                                    "product_id": "CSAFPID-5591605"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.2.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v3.2.0-rc2",
                                    "product_id": "CSAFPID-5591606"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.2.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v3.2.0-rc3",
                                    "product_id": "CSAFPID-5591607"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.3.0",
                                "product": {
                                    "name": "vers:unknown/v3.3.0",
                                    "product_id": "CSAFPID-5591608"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.3.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v3.3.0-rc1",
                                    "product_id": "CSAFPID-5591609"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.3.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v3.3.0-rc2",
                                    "product_id": "CSAFPID-5591610"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.3.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v3.3.0-rc3",
                                    "product_id": "CSAFPID-5591611"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.4.0",
                                "product": {
                                    "name": "vers:unknown/v3.4.0",
                                    "product_id": "CSAFPID-5591612"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.4.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v3.4.0-rc1",
                                    "product_id": "CSAFPID-5591613"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.4.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v3.4.0-rc2",
                                    "product_id": "CSAFPID-5591614"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.4.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v3.4.0-rc3",
                                    "product_id": "CSAFPID-5591615"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.5.0",
                                "product": {
                                    "name": "vers:unknown/v3.5.0",
                                    "product_id": "CSAFPID-5596063"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.5.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v3.5.0-rc1",
                                    "product_id": "CSAFPID-5591640"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.5.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v3.5.0-rc2",
                                    "product_id": "CSAFPID-5591641"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.5.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v3.5.0-rc3",
                                    "product_id": "CSAFPID-5591642"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.6.0",
                                "product": {
                                    "name": "vers:unknown/v3.6.0",
                                    "product_id": "CSAFPID-5596064"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.6.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v3.6.0-rc1",
                                    "product_id": "CSAFPID-5596065"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.6.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v3.6.0-rc2",
                                    "product_id": "CSAFPID-5596066"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.6.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v3.6.0-rc3",
                                    "product_id": "CSAFPID-5596067"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.7.0",
                                "product": {
                                    "name": "vers:unknown/v3.7.0",
                                    "product_id": "CSAFPID-5596069"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.7.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v3.7.0-rc1",
                                    "product_id": "CSAFPID-5596070"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.7.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v3.7.0-rc2",
                                    "product_id": "CSAFPID-5596071"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v3.7.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v3.7.0-rc3",
                                    "product_id": "CSAFPID-5596072"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.0.0",
                                "product": {
                                    "name": "vers:unknown/v4.0.0",
                                    "product_id": "CSAFPID-5604263"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.0.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v4.0.0-rc1",
                                    "product_id": "CSAFPID-5604264"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.0.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v4.0.0-rc2",
                                    "product_id": "CSAFPID-5604265"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.0.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v4.0.0-rc3",
                                    "product_id": "CSAFPID-5604266"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.1.0",
                                "product": {
                                    "name": "vers:unknown/v4.1.0",
                                    "product_id": "CSAFPID-5604267"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.1.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v4.1.0-rc1",
                                    "product_id": "CSAFPID-5604268"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.1.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v4.1.0-rc2",
                                    "product_id": "CSAFPID-5604269"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.1.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v4.1.0-rc3",
                                    "product_id": "CSAFPID-5604270"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.2.0",
                                "product": {
                                    "name": "vers:unknown/v4.2.0",
                                    "product_id": "CSAFPID-8566770"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.2.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v4.2.0-rc1",
                                    "product_id": "CSAFPID-8566773"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.2.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v4.2.0-rc2",
                                    "product_id": "CSAFPID-8566772"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.2.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v4.2.0-rc3",
                                    "product_id": "CSAFPID-8566771"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.3.0",
                                "product": {
                                    "name": "vers:unknown/v4.3.0",
                                    "product_id": "CSAFPID-8570147"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.3.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v4.3.0-rc1",
                                    "product_id": "CSAFPID-8570150"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.3.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v4.3.0-rc2",
                                    "product_id": "CSAFPID-8570149"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.3.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v4.3.0-rc3",
                                    "product_id": "CSAFPID-8570148"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.4.0-rc1",
                                "product": {
                                    "name": "vers:unknown/v4.4.0-rc1",
                                    "product_id": "CSAFPID-8570146"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.4.0-rc2",
                                "product": {
                                    "name": "vers:unknown/v4.4.0-rc2",
                                    "product_id": "CSAFPID-8570145"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/v4.4.0-rc3",
                                "product": {
                                    "name": "vers:unknown/v4.4.0-rc3",
                                    "product_id": "CSAFPID-8570144"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.0.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.0.0",
                                    "product_id": "CSAFPID-5591616"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.1.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.1.0",
                                    "product_id": "CSAFPID-5591617"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.10.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.10.0",
                                    "product_id": "CSAFPID-5591618"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.11.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.11.0",
                                    "product_id": "CSAFPID-5591619"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.12.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.12.0",
                                    "product_id": "CSAFPID-5591620"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.13.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.13.0",
                                    "product_id": "CSAFPID-5591621"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.14.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.14.0",
                                    "product_id": "CSAFPID-5591622"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.2.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.2.0",
                                    "product_id": "CSAFPID-5591623"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.3.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.3.0",
                                    "product_id": "CSAFPID-5591624"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.4.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.4.0",
                                    "product_id": "CSAFPID-5591625"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.5.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.5.0",
                                    "product_id": "CSAFPID-5591626"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v1.9.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v1.9.0",
                                    "product_id": "CSAFPID-5591627"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v2.0.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v2.0.0",
                                    "product_id": "CSAFPID-5591628"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v2.1.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v2.1.0",
                                    "product_id": "CSAFPID-5591629"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v2.2.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v2.2.0",
                                    "product_id": "CSAFPID-5591630"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v2.3.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v2.3.0",
                                    "product_id": "CSAFPID-5591631"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v2.4.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v2.4.0",
                                    "product_id": "CSAFPID-5591632"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v2.5.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v2.5.0",
                                    "product_id": "CSAFPID-5591633"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v2.6.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v2.6.0",
                                    "product_id": "CSAFPID-5591634"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v3.0.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v3.0.0",
                                    "product_id": "CSAFPID-5591635"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v3.1.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v3.1.0",
                                    "product_id": "CSAFPID-5591636"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v3.2.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v3.2.0",
                                    "product_id": "CSAFPID-5591637"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v3.3.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v3.3.0",
                                    "product_id": "CSAFPID-5591638"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v3.4.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v3.4.0",
                                    "product_id": "CSAFPID-5591639"
                                }
                            },
                            {
                                "category": "product_version_range",
                                "name": "vers:unknown/zephyr-v3.5.0",
                                "product": {
                                    "name": "vers:unknown/zephyr-v3.5.0",
                                    "product_id": "CSAFPID-5596068"
                                }
                            }
                        ],
                        "category": "product_name",
                        "name": "zephyr"
                    }
                ],
                "category": "vendor",
                "name": "zephyrproject-rtos"
            }
        ]
    },
    "vulnerabilities": [
        {
            "cve": "CVE-2026-10666",
            "cwe": {
                "id": "CWE-121",
                "name": "Stack-based Buffer Overflow"
            },
            "notes": [
                {
                    "category": "description",
                    "text": "parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form \"a.b.c.d:port\") copies the port substring into a fixed 17-byte stack buffer (char ipaddr[NET_IPV4_ADDR_LEN + 1]) using a length of str_len - end - 1, where str_len is the full, unbounded input length and end is only the (<=15-byte) offset of the ':' delimiter. Because the destination size is never consulted, a crafted address string with a long suffix after the colon (e.g. \"1.2.3.4:\" followed by hundreds of bytes) causes an out-of-bounds stack write whose length and contents are fully attacker-controlled (memcpy of the suffix plus a trailing NUL), enabling memory corruption and at minimum a denial of service, and potentially control-flow hijack. The parser is reached from the standard socket API (zsock_getaddrinfo / literal-address resolution), DNS server-string configuration, and the eswifi Wi-Fi co-processor DNS-response path, so an application that resolves a network-influenced address string is exposed. The bug was introduced when the parser was added (Zephyr v1.9.0) and shipped in all releases through v4.4.0. The fix removes the unbounded copy and validates the port length before copying into a small dedicated buffer. Note: the equivalent IPv6 \"[addr]:port\" path in parse_ipv6() retains the same unbounded copy at this commit and remains a separate, still-reachable instance of the defect.",
                    "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-10666"
                },
                {
                    "category": "description",
                    "text": "parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form \"a.b.c.d:port\") copies the port substring into a fixed 17-byte stack buffer (char ipaddr[NET_IPV4_ADDR_LEN + 1]) using a length of str_len - end - 1, where str_len is the full, unbounded input length and end is only the (<=15-byte) offset of the ':' delimiter. Because the destination size is never consulted, a crafted address string with a long suffix after the colon (e.g. \"1.2.3.4:\" followed by hundreds of bytes) causes an out-of-bounds stack write whose length and contents are fully attacker-controlled (memcpy of the suffix plus a trailing NUL), enabling memory corruption and at minimum a denial of service, and potentially control-flow hijack. The parser is reached from the standard socket API (zsock_getaddrinfo / literal-address resolution), DNS server-string configuration, and the eswifi Wi-Fi co-processor DNS-response path, so an application that resolves a network-influenced address string is exposed. The bug was introduced when the parser was added (Zephyr v1.9.0) and shipped in all releases through v4.4.0. The fix removes the unbounded copy and validates the port length before copying into a small dedicated buffer. Note: the equivalent IPv6 \"[addr]:port\" path in parse_ipv6() retains the same unbounded copy at this commit and remains a separate, still-reachable instance of the defect.",
                    "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-10666.json?alt=media"
                },
                {
                    "category": "description",
                    "text": "parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form \"a.b.c.d:port\") copies the port substring into a fixed 17-byte stack buffer (char ipaddr[NET_IPV4_ADDR_LEN + 1]) using a length of str_len - end - 1, where str_len is the full, unbounded input length and end is only the (<=15-byte) offset of the ':' delimiter. Because the destination size is never consulted, a crafted address string with a long suffix after the colon (e.g. \"1.2.3.4:\" followed by hundreds of bytes) causes an out-of-bounds stack write whose length and contents are fully attacker-controlled (memcpy of the suffix plus a trailing NUL), enabling memory corruption and at minimum a denial of service, and potentially control-flow hijack. The parser is reached from the standard socket API (zsock_getaddrinfo / literal-address resolution), DNS server-string configuration, and the eswifi Wi-Fi co-processor DNS-response path, so an application that resolves a network-influenced address string is exposed. The bug was introduced when the parser was added (Zephyr v1.9.0) and shipped in all releases through v4.4.0. The fix removes the unbounded copy and validates the port length before copying into a small dedicated buffer. Note: the equivalent IPv6 \"[addr]:port\" path in parse_ipv6() retains the same unbounded copy at this commit and remains a separate, still-reachable instance of the defect.",
                    "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10666.json"
                },
                {
                    "category": "other",
                    "text": "0.00654",
                    "title": "EPSS"
                },
                {
                    "category": "other",
                    "text": "3.7",
                    "title": "NCSC Score"
                },
                {
                    "category": "other",
                    "text": "Is related to an uncommon product vendor, Is related to (a version of) an uncommon product, There is exploit data available from source Nvd, Exploit code publicly available",
                    "title": "NCSC Score top decreasing factors"
                }
            ],
            "product_status": {
                "known_affected": [
                    "CSAFPID-8708769",
                    "CSAFPID-533195",
                    "CSAFPID-548245",
                    "CSAFPID-687359",
                    "CSAFPID-689679",
                    "CSAFPID-689680",
                    "CSAFPID-689688",
                    "CSAFPID-5591523",
                    "CSAFPID-5591524",
                    "CSAFPID-5591525",
                    "CSAFPID-5591526",
                    "CSAFPID-5591527",
                    "CSAFPID-5591528",
                    "CSAFPID-5591529",
                    "CSAFPID-5591530",
                    "CSAFPID-5591531",
                    "CSAFPID-5591532",
                    "CSAFPID-5591533",
                    "CSAFPID-5591534",
                    "CSAFPID-5591535",
                    "CSAFPID-5591536",
                    "CSAFPID-5591537",
                    "CSAFPID-5591538",
                    "CSAFPID-5591539",
                    "CSAFPID-5591540",
                    "CSAFPID-5591541",
                    "CSAFPID-5591542",
                    "CSAFPID-5591543",
                    "CSAFPID-5591544",
                    "CSAFPID-5591545",
                    "CSAFPID-5591546",
                    "CSAFPID-5591547",
                    "CSAFPID-5591548",
                    "CSAFPID-5591549",
                    "CSAFPID-5591550",
                    "CSAFPID-5591551",
                    "CSAFPID-5591552",
                    "CSAFPID-5591553",
                    "CSAFPID-5591554",
                    "CSAFPID-5591555",
                    "CSAFPID-5591556",
                    "CSAFPID-5591557",
                    "CSAFPID-5591558",
                    "CSAFPID-5591559",
                    "CSAFPID-5591560",
                    "CSAFPID-5591561",
                    "CSAFPID-5591562",
                    "CSAFPID-5591563",
                    "CSAFPID-5591564",
                    "CSAFPID-5591565",
                    "CSAFPID-5591566",
                    "CSAFPID-5591567",
                    "CSAFPID-5591568",
                    "CSAFPID-5591569",
                    "CSAFPID-5591570",
                    "CSAFPID-5591571",
                    "CSAFPID-5591572",
                    "CSAFPID-5591573",
                    "CSAFPID-5591574",
                    "CSAFPID-5591575",
                    "CSAFPID-5591576",
                    "CSAFPID-5591577",
                    "CSAFPID-5591578",
                    "CSAFPID-5591579",
                    "CSAFPID-5591580",
                    "CSAFPID-5591581",
                    "CSAFPID-5591582",
                    "CSAFPID-5591583",
                    "CSAFPID-5591584",
                    "CSAFPID-5591585",
                    "CSAFPID-5591586",
                    "CSAFPID-5591587",
                    "CSAFPID-5591588",
                    "CSAFPID-5591589",
                    "CSAFPID-5591590",
                    "CSAFPID-5591591",
                    "CSAFPID-5591592",
                    "CSAFPID-5591593",
                    "CSAFPID-5591594",
                    "CSAFPID-5591595",
                    "CSAFPID-5591596",
                    "CSAFPID-5591597",
                    "CSAFPID-5591598",
                    "CSAFPID-5591599",
                    "CSAFPID-5591600",
                    "CSAFPID-5591601",
                    "CSAFPID-5591602",
                    "CSAFPID-5591603",
                    "CSAFPID-5591604",
                    "CSAFPID-5591605",
                    "CSAFPID-5591606",
                    "CSAFPID-5591607",
                    "CSAFPID-5591608",
                    "CSAFPID-5591609",
                    "CSAFPID-5591610",
                    "CSAFPID-5591611",
                    "CSAFPID-5591612",
                    "CSAFPID-5591613",
                    "CSAFPID-5591614",
                    "CSAFPID-5591615",
                    "CSAFPID-5591616",
                    "CSAFPID-5591617",
                    "CSAFPID-5591618",
                    "CSAFPID-5591619",
                    "CSAFPID-5591620",
                    "CSAFPID-5591621",
                    "CSAFPID-5591622",
                    "CSAFPID-5591623",
                    "CSAFPID-5591624",
                    "CSAFPID-5591625",
                    "CSAFPID-5591626",
                    "CSAFPID-5591627",
                    "CSAFPID-5591628",
                    "CSAFPID-5591629",
                    "CSAFPID-5591630",
                    "CSAFPID-5591631",
                    "CSAFPID-5591632",
                    "CSAFPID-5591633",
                    "CSAFPID-5591634",
                    "CSAFPID-5591635",
                    "CSAFPID-5591636",
                    "CSAFPID-5591637",
                    "CSAFPID-5591638",
                    "CSAFPID-5591639",
                    "CSAFPID-5591640",
                    "CSAFPID-5591641",
                    "CSAFPID-5591642",
                    "CSAFPID-5596063",
                    "CSAFPID-5596064",
                    "CSAFPID-5596065",
                    "CSAFPID-5596066",
                    "CSAFPID-5596067",
                    "CSAFPID-5596068",
                    "CSAFPID-5596069",
                    "CSAFPID-5596070",
                    "CSAFPID-5596071",
                    "CSAFPID-5596072",
                    "CSAFPID-5604263",
                    "CSAFPID-5604264",
                    "CSAFPID-5604265",
                    "CSAFPID-5604266",
                    "CSAFPID-5604267",
                    "CSAFPID-5604268",
                    "CSAFPID-5604269",
                    "CSAFPID-5604270",
                    "CSAFPID-8566770",
                    "CSAFPID-8566771",
                    "CSAFPID-8566772",
                    "CSAFPID-8566773",
                    "CSAFPID-8570144",
                    "CSAFPID-8570145",
                    "CSAFPID-8570146",
                    "CSAFPID-8570147",
                    "CSAFPID-8570148",
                    "CSAFPID-8570149",
                    "CSAFPID-8570150",
                    "CSAFPID-8852464"
                ]
            },
            "references": [
                {
                    "category": "external",
                    "summary": "Source - first",
                    "url": "https://api.first.org/data/v1/epss"
                },
                {
                    "category": "external",
                    "summary": "Source - nvd",
                    "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-10666"
                },
                {
                    "category": "external",
                    "summary": "Source - cveprojectv5",
                    "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/10xxx/CVE-2026-10666.json"
                },
                {
                    "category": "external",
                    "summary": "Source - osv",
                    "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-10666.json?alt=media"
                },
                {
                    "category": "external",
                    "summary": "Source - ncscclear",
                    "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-10666"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://github.com/zephyrproject-rtos/zephyr/commit/1c8d19a51f9a3c1be6de53854c8ad8c2720a0f48"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://github.com/zephyrproject-rtos/zephyr/commit/6e119a636a57be449ea21e73cad762ebc6f5ff7a"
                },
                {
                    "category": "external",
                    "summary": "Reference - cveprojectv5; nvd; osv",
                    "url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-532c-7g7f-jhmh"
                },
                {
                    "category": "external",
                    "summary": "Reference - osv",
                    "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10666.json"
                },
                {
                    "category": "external",
                    "summary": "Reference - osv",
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10666"
                }
            ],
            "scores": [
                {
                    "cvss_v3": {
                        "version": "3.1",
                        "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                        "baseScore": 8.1,
                        "baseSeverity": "HIGH"
                    },
                    "products": [
                        "CSAFPID-533195",
                        "CSAFPID-548245",
                        "CSAFPID-5591523",
                        "CSAFPID-5591524",
                        "CSAFPID-5591525",
                        "CSAFPID-5591526",
                        "CSAFPID-5591527",
                        "CSAFPID-5591528",
                        "CSAFPID-5591529",
                        "CSAFPID-5591530",
                        "CSAFPID-5591531",
                        "CSAFPID-5591532",
                        "CSAFPID-5591533",
                        "CSAFPID-5591534",
                        "CSAFPID-5591535",
                        "CSAFPID-5591536",
                        "CSAFPID-5591537",
                        "CSAFPID-5591538",
                        "CSAFPID-5591539",
                        "CSAFPID-5591540",
                        "CSAFPID-5591541",
                        "CSAFPID-5591542",
                        "CSAFPID-5591543",
                        "CSAFPID-5591544",
                        "CSAFPID-5591545",
                        "CSAFPID-5591546",
                        "CSAFPID-5591547",
                        "CSAFPID-5591548",
                        "CSAFPID-5591549",
                        "CSAFPID-5591550",
                        "CSAFPID-5591551",
                        "CSAFPID-5591552",
                        "CSAFPID-5591553",
                        "CSAFPID-5591554",
                        "CSAFPID-5591555",
                        "CSAFPID-5591556",
                        "CSAFPID-5591557",
                        "CSAFPID-5591558",
                        "CSAFPID-5591559",
                        "CSAFPID-5591560",
                        "CSAFPID-5591561",
                        "CSAFPID-5591562",
                        "CSAFPID-5591563",
                        "CSAFPID-5591564",
                        "CSAFPID-5591565",
                        "CSAFPID-5591566",
                        "CSAFPID-5591567",
                        "CSAFPID-5591568",
                        "CSAFPID-5591569",
                        "CSAFPID-5591570",
                        "CSAFPID-5591571",
                        "CSAFPID-5591572",
                        "CSAFPID-5591573",
                        "CSAFPID-5591574",
                        "CSAFPID-5591575",
                        "CSAFPID-5591576",
                        "CSAFPID-5591577",
                        "CSAFPID-5591578",
                        "CSAFPID-5591579",
                        "CSAFPID-5591580",
                        "CSAFPID-5591581",
                        "CSAFPID-5591582",
                        "CSAFPID-5591583",
                        "CSAFPID-5591584",
                        "CSAFPID-5591585",
                        "CSAFPID-5591586",
                        "CSAFPID-5591587",
                        "CSAFPID-5591588",
                        "CSAFPID-5591589",
                        "CSAFPID-5591590",
                        "CSAFPID-5591591",
                        "CSAFPID-5591592",
                        "CSAFPID-5591593",
                        "CSAFPID-5591594",
                        "CSAFPID-5591595",
                        "CSAFPID-5591596",
                        "CSAFPID-5591597",
                        "CSAFPID-5591598",
                        "CSAFPID-5591599",
                        "CSAFPID-5591600",
                        "CSAFPID-5591601",
                        "CSAFPID-5591602",
                        "CSAFPID-5591603",
                        "CSAFPID-5591604",
                        "CSAFPID-5591605",
                        "CSAFPID-5591606",
                        "CSAFPID-5591607",
                        "CSAFPID-5591608",
                        "CSAFPID-5591609",
                        "CSAFPID-5591610",
                        "CSAFPID-5591611",
                        "CSAFPID-5591612",
                        "CSAFPID-5591613",
                        "CSAFPID-5591614",
                        "CSAFPID-5591615",
                        "CSAFPID-5591616",
                        "CSAFPID-5591617",
                        "CSAFPID-5591618",
                        "CSAFPID-5591619",
                        "CSAFPID-5591620",
                        "CSAFPID-5591621",
                        "CSAFPID-5591622",
                        "CSAFPID-5591623",
                        "CSAFPID-5591624",
                        "CSAFPID-5591625",
                        "CSAFPID-5591626",
                        "CSAFPID-5591627",
                        "CSAFPID-5591628",
                        "CSAFPID-5591629",
                        "CSAFPID-5591630",
                        "CSAFPID-5591631",
                        "CSAFPID-5591632",
                        "CSAFPID-5591633",
                        "CSAFPID-5591634",
                        "CSAFPID-5591635",
                        "CSAFPID-5591636",
                        "CSAFPID-5591637",
                        "CSAFPID-5591638",
                        "CSAFPID-5591639",
                        "CSAFPID-5591640",
                        "CSAFPID-5591641",
                        "CSAFPID-5591642",
                        "CSAFPID-5596063",
                        "CSAFPID-5596064",
                        "CSAFPID-5596065",
                        "CSAFPID-5596066",
                        "CSAFPID-5596067",
                        "CSAFPID-5596068",
                        "CSAFPID-5596069",
                        "CSAFPID-5596070",
                        "CSAFPID-5596071",
                        "CSAFPID-5596072",
                        "CSAFPID-5604263",
                        "CSAFPID-5604264",
                        "CSAFPID-5604265",
                        "CSAFPID-5604266",
                        "CSAFPID-5604267",
                        "CSAFPID-5604268",
                        "CSAFPID-5604269",
                        "CSAFPID-5604270",
                        "CSAFPID-687359",
                        "CSAFPID-689679",
                        "CSAFPID-689680",
                        "CSAFPID-689688",
                        "CSAFPID-8566770",
                        "CSAFPID-8566771",
                        "CSAFPID-8566772",
                        "CSAFPID-8566773",
                        "CSAFPID-8570144",
                        "CSAFPID-8570145",
                        "CSAFPID-8570146",
                        "CSAFPID-8570147",
                        "CSAFPID-8570148",
                        "CSAFPID-8570149",
                        "CSAFPID-8570150",
                        "CSAFPID-8708769",
                        "CSAFPID-8852464"
                    ]
                }
            ],
            "title": "CVE-2026-10666"
        }
    ]
}