PatchTheCVECVE-2025-36939: Multiple vulnerabilities exist in OpenThread's handling of MLE packets
CVE-2025-36939 is a medium-severity flaw (CVSS 5.7) affecting nest wifi router firmware, nest wifi point firmware, nest wifi pro firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 5.7 (Medium) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 82%) |
| CISA exploited list | No |
| Weakness | CWE-121 |
| Published | 2026-08-24 |
| Last modified | 2026-10-07 |
Last updated 2026-10-07 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-36939?
nest wifi router firmware: mitigate or apply the listed mitigation; nest wifi point firmware: mitigate or apply the listed mitigation; nest wifi pro firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2025-36939 being exploited?
CVE-2025-36939 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-36939 affect?
CVE-2025-36939 affects nest wifi router firmware, nest wifi point firmware, nest wifi pro firmware. Severity is medium (CVSS 5.7). Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failu
How urgent is CVE-2025-36939?
Priority 24/100. No elevated risk signals yet.