The vulnerability CVE-2026-19293 in silabs.com WiseConnect involves the SMP security request from peripheral devices not including the maximum encryption key size supported. Consequently, encryption keys smaller than the maximum can be used, reducing the complexity and making brute-force attacks more feasible. This weakness relates to CWE-521, which concerns weak password requirements. The flaw affects versions 2.0.0 and 4.0.0 of WiseConnect. The CVSS 3.1 vector indicates the attack requires adjacent network access with low complexity and no privileges or user interaction, resulting in high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

An attacker with adjacent network access can exploit this vulnerability without privileges or user interaction to compromise the confidentiality, integrity, and availability of the affected system. The use of encryption keys smaller than the maximum supported size weakens security, making brute-force attacks easier and increasing the risk of unauthorized access or data compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting network access to trusted devices only and monitor for unusual activity related to encryption key negotiation. Avoid deploying affected versions in high-risk environments if possible.