Silicon Labs EmberZNet

• CVE-2026-85079 High 7.5 Out-of-bounds write in Zigbee Simple_Desc_req handling 0.7%
• CVE-2026-94502 High 7.5 Out-of-bounds write in Zigbee Publish Price Matrix handling 0.7%
• CVE-2026-66282 Medium 6.0 Authenticated Denial-of-Service in Zigbee Publish Billing Period 0.3%
• CVE-2026-66281 Medium 6.0 Authenticated Denial-of-Service in Zigbee Discover Attributes Handling 0.3%
• CVE-2026-85080 Medium 6.0 Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling 0.5%
• CVE-2026-6432 Medium 5.3 Improper bounds validation in EmberZNet SDK 0.6%
• CVE-2026-47154 High 7.1 Simple Metering GetProfileResponse interval-bounds bug in EmberZNet v9.0.2 0.4%
• CVE-2026-47153 High 7.1 Level Control Step With On/Off divide-by-zero in EmberZNet v9.0.2 0.4%
• CVE-2026-47152 High 7.1 Level Control Move divide-by-zero in EmberZNet v9.0.2 0.4%
• CVE-2026-47151 High 7.1 Door Lock ClearWeekdaySchedule invalid table index and write in EmberZNet v9.0.2 0.4%
• CVE-2026-47150 High 7.1 IAS Zone enroll invalid table index and write in EmberZNet 9.0.2 0.4%
• CVE-2026-47149 High 7.1 Door Lock GetUserType invalid table index in EmberZNet v9.0.2 0.4%
• CVE-2026-47148 High 7.1 Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2 0.4%
• CVE-2026-47147 High 7.1 OTA server raw parser missing per-field bounds validation in EmberZNet v9.0.2 0.4%
• CVE-2026-47146 High 7.1 Color Control color-temperature assertion abort in EmberZNet v9.0.2 0.4%
• CVE-2026-47145 High 7.1 Color Control hue/saturation assertion abort in EmberZNet v9.0.2 0.4%
• CVE-2026-4526 High 7.1 Global ZCL command parser missing minimum-length validation in EmberZNet v9.0.2 0.4%