VYPR

UpdateHub

by UpdateHub

CVEs (1)

  • CVE-2026-76787MedOct 19, 2026
    risk 0.31cvss 5.9epss —

    The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_probe() (subsys/mgmt/updatehub/updatehub.c). The decoder treats every descriptor field as optional — json_obj_parse() returns a bitmask of the fields it…