{"id":"CVE-2026-28617","title":"In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion","summary":"In add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for ex…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-400"],"vendor":"google","product":"android","affected":["android = 15.0","android = 16.0","android = 17.0"],"published":"2026-09-08","updated":"2026-09-15","sourceUpdated":"2026-09-15T14:23:43.973","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-28617","references":[{"url":"https://source.android.com/docs/security/bulletin/2026/2026-09-01","label":"security@android.com"}],"tags":["nvd","cve.org"],"epss":0.00068,"epssPercentile":0.00036,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T17:09:59.810341Z"},"ingestedAt":"2026-09-08T19:08:49.642Z","slug":"CVE-2026-28617","body":"## Overview\n\nIn add of WifiNetworkSuggestionsManager.java, there is a possible persistent DOS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n## Affected\n\n- `android = 15.0`\n- `android = 16.0`\n- `android = 17.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201533,"id":"CVE-2026-28617","ts":1789399510935,"field":"cvss","old":null,"new":"5.5"},{"seq":201532,"id":"CVE-2026-28617","ts":1789399510935,"field":"severity","old":"none","new":"medium"},{"seq":200267,"id":"CVE-2026-28617","ts":1789397086346,"field":"cvss","old":"5.5","new":null},{"seq":200266,"id":"CVE-2026-28617","ts":1789397086346,"field":"severity","old":"medium","new":"none"},{"seq":198191,"id":"CVE-2026-28617","ts":1789391741549,"field":"cvss","old":null,"new":"5.5"},{"seq":198190,"id":"CVE-2026-28617","ts":1789391741549,"field":"severity","old":"none","new":"medium"},{"seq":195984,"id":"CVE-2026-28617","ts":1789383399432,"field":"cvss","old":"5.5","new":null},{"seq":195983,"id":"CVE-2026-28617","ts":1789383399432,"field":"severity","old":"medium","new":"none"},{"seq":194913,"id":"CVE-2026-28617","ts":1789380300457,"field":"cvss","old":null,"new":"5.5"},{"seq":194912,"id":"CVE-2026-28617","ts":1789380300457,"field":"severity","old":"none","new":"medium"},{"seq":193700,"id":"CVE-2026-28617","ts":1789378268972,"field":"cvss","old":"5.5","new":null},{"seq":193699,"id":"CVE-2026-28617","ts":1789378268972,"field":"severity","old":"medium","new":"none"},{"seq":192487,"id":"CVE-2026-28617","ts":1789376233349,"field":"cvss","old":null,"new":"5.5"},{"seq":192486,"id":"CVE-2026-28617","ts":1789376233349,"field":"severity","old":"none","new":"medium"},{"seq":191274,"id":"CVE-2026-28617","ts":1789373126661,"field":"cvss","old":"5.5","new":null},{"seq":191273,"id":"CVE-2026-28617","ts":1789373126661,"field":"severity","old":"medium","new":"none"},{"seq":190059,"id":"CVE-2026-28617","ts":1789369121090,"field":"cvss","old":null,"new":"5.5"},{"seq":190058,"id":"CVE-2026-28617","ts":1789369121090,"field":"severity","old":"none","new":"medium"},{"seq":188846,"id":"CVE-2026-28617","ts":1789368038404,"field":"cvss","old":"5.5","new":null},{"seq":188845,"id":"CVE-2026-28617","ts":1789368038404,"field":"severity","old":"medium","new":"none"},{"seq":187629,"id":"CVE-2026-28617","ts":1789364996563,"field":"cvss","old":null,"new":"5.5"},{"seq":187628,"id":"CVE-2026-28617","ts":1789364996563,"field":"severity","old":"none","new":"medium"},{"seq":186416,"id":"CVE-2026-28617","ts":1789363002433,"field":"cvss","old":"5.5","new":null},{"seq":186415,"id":"CVE-2026-28617","ts":1789363002433,"field":"severity","old":"medium","new":"none"},{"seq":185202,"id":"CVE-2026-28617","ts":1789360969756,"field":"cvss","old":null,"new":"5.5"},{"seq":185201,"id":"CVE-2026-28617","ts":1789360969756,"field":"severity","old":"none","new":"medium"},{"seq":183989,"id":"CVE-2026-28617","ts":1789357943457,"field":"cvss","old":"5.5","new":null},{"seq":183988,"id":"CVE-2026-28617","ts":1789357943457,"field":"severity","old":"medium","new":"none"},{"seq":182241,"id":"CVE-2026-28617","ts":1789354097943,"field":"cvss","old":null,"new":"5.5"},{"seq":182240,"id":"CVE-2026-28617","ts":1789354097943,"field":"severity","old":"none","new":"medium"},{"seq":181034,"id":"CVE-2026-28617","ts":1789352943432,"field":"cvss","old":"5.5","new":null},{"seq":181033,"id":"CVE-2026-28617","ts":1789352943432,"field":"severity","old":"medium","new":"none"},{"seq":179827,"id":"CVE-2026-28617","ts":1789350001138,"field":"cvss","old":null,"new":"5.5"},{"seq":179826,"id":"CVE-2026-28617","ts":1789350001138,"field":"severity","old":"none","new":"medium"},{"seq":178620,"id":"CVE-2026-28617","ts":1789347814373,"field":"cvss","old":"5.5","new":null},{"seq":178619,"id":"CVE-2026-28617","ts":1789347814373,"field":"severity","old":"medium","new":"none"},{"seq":177413,"id":"CVE-2026-28617","ts":1789346181758,"field":"cvss","old":null,"new":"5.5"},{"seq":177412,"id":"CVE-2026-28617","ts":1789346181758,"field":"severity","old":"none","new":"medium"},{"seq":176206,"id":"CVE-2026-28617","ts":1789342752058,"field":"cvss","old":"5.5","new":null},{"seq":176205,"id":"CVE-2026-28617","ts":1789342752058,"field":"severity","old":"medium","new":"none"},{"seq":175990,"id":"CVE-2026-28617","ts":1789342358561,"field":"cvss","old":null,"new":"5.5"},{"seq":175989,"id":"CVE-2026-28617","ts":1789342358561,"field":"severity","old":"none","new":"medium"},{"seq":175530,"id":"CVE-2026-28617","ts":1789338390061,"field":"cvss","old":"5.5","new":null},{"seq":175529,"id":"CVE-2026-28617","ts":1789338390061,"field":"severity","old":"medium","new":"none"},{"seq":174325,"id":"CVE-2026-28617","ts":1789334604809,"field":"cvss","old":null,"new":"5.5"},{"seq":174324,"id":"CVE-2026-28617","ts":1789334604809,"field":"severity","old":"none","new":"medium"},{"seq":173120,"id":"CVE-2026-28617","ts":1789333197478,"field":"cvss","old":"5.5","new":null},{"seq":173119,"id":"CVE-2026-28617","ts":1789333197478,"field":"severity","old":"medium","new":"none"},{"seq":171934,"id":"CVE-2026-28617","ts":1789330884526,"field":"cvss","old":null,"new":"5.5"},{"seq":171933,"id":"CVE-2026-28617","ts":1789330884526,"field":"severity","old":"none","new":"medium"}]}