CVE-2026-11811 | Zephyr Project up to 4.4.1 UpdateHub updatehub.c start_coap_client denial of service

A vulnerability was found in Zephyr Project Zephyr up to 4.4.1. It has been declared as critical. This impacts the function start_coap_client of the file subsys/mgmt/updatehub/updatehub.c of the component UpdateHub. Executing a manipulation can lead to denial of service.

This vulnerability is handled as CVE-2026-11811. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.