congo_firmware vulnerabilities
CVEs whose affected-version data names the congo_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-25275High· 7.5Transient DOS when processing authentication frames with invalid FILS information element header lengths.
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
▾ Twilightqualcomm · q-7790_firmwareEPSS 0.19%via NVD
CVE-2026-25294High· 7.4Transient DOS while parsing frame during channel usage.
Transient DOS while parsing frame during channel usage.
▾ Twilightqualcomm · cologne_firmwareEPSS 0.10%via NVD