CVE-2026-3290: Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values

High severity · published May 14, 2026

CVE-2026-3290

Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values

7.4

CVSS

0.2%

EPSS

On KEV

Exploitation

Is it being used?

Exploit prediction (EPSS)0.2% · higher than 5% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

through 2.13.1 · source: vendor

Affected product

RS9116 SDK

Silicon Labs

References