{"vulnerability": "cve-2026-1065", "sightings": [{"uuid": "0486f7a5-ce3a-4c2e-aed4-95befce19767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10658", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116797540252277980", "content": "Zephyr <=4.4.0 Bluetooth Host ISO path has CVE-2026-10658 (HIGH). Missing SDU header length checks can cause denial of service (kernel assert) or OOB reads if CONFIG_BT_ISO_RX is enabled. Evaluate mitigations now. https://radar.offseq.com/threat/cve-2026-10658-vulnerability-in-zephyrproject-rtos-9bbc3a2423f55b2a #OffSeq #Zephyr #CVE #Bluetooth", "creation_timestamp": "2026-06-23T04:30:31.365124Z"}, {"uuid": "ea8c9546-ff77-4df9-9225-204ba7b3b3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10658", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mowkw3za722p", "content": "CVE-2026-10658 (HIGH) affects Zephyr <=4.4.0 with CONFIG_BT_ISO_RX. Bluetooth ISO receive flaw can cause denial of service or OOB read. Restrict untrusted HCI ISO sources and check patch status: https://radar.offseq.com/threat/cve-2026-10658-vulnerability-in-zephyrproject-rtos-9bbc3a2423f55b2a #O...", "creation_timestamp": "2026-06-23T04:30:32.488402Z"}, {"uuid": "fdb7e9e0-63b2-49c6-abc6-01a84ddc374e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10653", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpjljaqkzx2z", "content": "CVE-2026-10653 - Non-atomic `net_buf` reference counts cause double-free / free-list corruption under concurrent unref\nCVE ID : CVE-2026-10653\n \n Published : June 30, 2026, 4:20 p.m. | 1\u00a0hour, 26\u00a0minutes ago\n \n Description : The Zephyr net_buf library (lib/net_buf/buf.c) manip...", "creation_timestamp": "2026-06-30T18:01:49.404052Z"}, {"uuid": "c5b5841e-95d3-42b9-b4dd-6732795ae4cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10654", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpjlvpiomc2p", "content": "CVE-2026-10654 - RFCOMM session-disconnect race leaks session/L2CAP and denies further RFCOMM service in Zephyr Bluetooth Classic\nCVE ID : CVE-2026-10654\n \n Published : June 30, 2026, 4:29 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : A race condition in the Zephyr Bluetooth ...", "creation_timestamp": "2026-06-30T18:08:47.598433Z"}, {"uuid": "cd749c47-4a92-45f3-96d5-0dbd64702e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10655", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpjmfwxtzh2v", "content": "CVE-2026-10655 - Use-after-free race in SNTP async client when closing the socket while the socket service is still polling it\nCVE ID : CVE-2026-10655\n \n Published : June 30, 2026, 4:33 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : The asynchronous SNTP client in Zephyr (subs...", "creation_timestamp": "2026-06-30T18:17:52.202390Z"}, {"uuid": "36514aea-4697-40b5-9076-9b8f16145abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10656", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpws2gljsb2p", "content": "CVE-2026-10656 - NULL-pointer dereference DoS in MAX32 USB device controller transfer-completion handlers\nCVE ID : CVE-2026-10656\n \n Published : July 5, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : The MAX32xxx USB device controller driver (drivers/usb/udc/udc_max32.c, c...", "creation_timestamp": "2026-07-06T00:03:25.005097Z"}, {"uuid": "23f64ac0-f389-4a31-a6de-df9670f2fc3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10657", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpwsd2euuv22", "content": "CVE-2026-10657 - Out-of-bounds read in Zephyr DNS resolver mDNS suffix check (memcmp past string NUL)\nCVE ID : CVE-2026-10657\n \n Published : July 5, 2026, 11:16 p.m. | 31\u00a0minutes ago\n \n Description : Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_inter...", "creation_timestamp": "2026-07-06T00:08:14.065375Z"}, {"uuid": "7d490073-6edb-4791-81f5-980800ea60ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10656", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq2ke6vsvr2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10656 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 MAX32xxx USB: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/7E601CE3-0BEE-485C-8BBC-EF10A84C17C4", "creation_timestamp": "2026-07-07T11:56:21.669400Z"}, {"uuid": "006826a5-7b42-4e98-8a1a-37feb5bb43c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10657", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mq2kwdklox2s", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10657 \u0432 DNS-\u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u0435 Zephyr: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/298A4D94-53DC-48D8-B151-843DE7D2FE44", "creation_timestamp": "2026-07-07T12:06:30.365695Z"}]}