High severity · published Jul 23, 2026
CVE-2026-6924
Weak entropy initialization in Silicon Labs Matter SiWx917 TinyCrypt path
8.7
CVSS
0.4%
EPSS
No
On KEV
Description
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers. This vulnerability was discovered after the impacted repository was already deprecated.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SL
Silicon Labs Matter Github · Silicon Labs
0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-6924
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-6924
github.com
https://github.com/SiliconLabs/matter/tree/release_2.3.1-1.3
siliconlabs.lightning.force.com
https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/a45Vm0000009SzZIAU?operationContext=S1