CVE-2026-24801

A Potential SPA-vulnerability in Ralim/IronOS

Medium · published January 27, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

Vulnerability in Ralim IronOS (source/Core/BSP/Pinecilv2/bl_mcu_sdk/components/ble/ble_stack/common/tinycrypt/source modules). This vulnerability is associated with program files ecc_dsa.C.

This issue affects IronOS: before v2.23-rc3.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/S:N/AU:N/R:U/V:C/RE:M/U:Red
EPSS
0.00206 · 10.1th percentile
Published
2026-01-27T08:36Z
EPSS history
Timeline
  • 27 JAN 08:36Z
    A Potential SPA-vulnerability in Ralim/IronOS
    cvelistv5