Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2026-47150: EmberZNet v9.0.2 and earlier: Malformed Network Messages Cause Crash
CVE-2026-47150 · published 4 months ago
Summary
EmberZNet network software versions 9.0.2 and earlier can crash if they receive a specific type of malformed message from a trusted device on the network. This could cause network disruptions. To fix this, update to the latest version of EmberZNet.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| silabs | emberznet |
<= 9.0.2 cpe:2.3:a:silabs:emberznet:*:*:*:*:*:*:*:* |
Original advisory text
In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write and terminate the process. The size and location of this write is limited. The...
In EmberZNet v9.0.2 and earlier, malformed IAS Zone enrollment messages can trigger an out-of-bounds state-table write and terminate the process. The size and location of this write is limited. These messages must come from a device that has already joined the network. Only devices supporting the IAS Zone cluster may be impacted.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-787Out-of-bounds Write
Timeline
Published25 Jun 2026
Updated4 Nov 2026
First seen25 Jun 2026
Sources
CVE-2026-47150 · NVD
Track software like this
Free during beta