Live › vulnerability › CVE-2026-85079
Go to dashboardEmberZNet 9.1.1 and earlier mishandle a malformed Simple_Desc_req response, causing an out-of-bounds write. The description says this can lead to remote code execution on the affected device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Devices running EmberZNet 9.1.1 or earlier, typically Zigbee radio stacks on embedded gateways or sensors. The attacker must wait for a Simple_Desc_req and needs a device already joined to the network to send the malformed response, so the exposure is limited to Zigbee mesh deployments. The sources do not list specific products or firmware builds.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a Simple_Desc_req before the attack can be performed.
This page as .md · .json · in your agent: get_signal("CVE-2026-85079")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.