ZEPHYR 3

• CVE-2026-15460 - Missing Channel-State Validation in Zephyr Bluetooth Classic L2CAP Receive Path Sep 9, 2026
• CVE-2026-10848 - Out-of-bounds Read in Zephyr OCPP 1.6 RPC Message Parser Aug 2, 2026
• CVE-2026-10681 - SMP Race in Thread Index Allocation Jul 25, 2026