CVE-2026-3290
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Passive
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
7.4
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
- Record
CVE-2026-3290- CVSS 4.0
- 7.4 High
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-332
- Updated
- 2026-11-02
EUVDEUVD-2026-30381
7.4
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
- Record
EUVD-2026-30381- CVSS 4.0
- 7.4 High
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-rjvv-82rg-ppqh
7.4
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable...
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
- Record
GHSA-rjvv-82rg-ppqh- CVSS 4.0
- 7.4 High
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-332
- Updated
- 2026-11-02
NVD
7.4
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
- Record
CVE-2026-3290- CVSS 4.0
- 7.4 High
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Weakness
- CWE-332
- Updated
- 2026-11-02
OSV
7.4
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values
- Record
CVE-2026-3290- CVSS 4.0
- 7.4 High
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-332
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-3290 is a high vulnerability (CVSS 7.4) in Silicon Labs Rs9116 Sdk, published May 14, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 5th percentile. No source names a fixed version.
References
siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm00000nIg6IIAS?operationContext=S1
github.com/SiliconLabs/wiseconnect-wifi-bt-sdk
nvd.nist.gov/vuln/detail/CVE-2026-3290
github.com/advisories/GHSA-rjvv-82rg-ppqh
github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3290.json