Live › vulnerability › CVE-2026-94502
Go to dashboardEmberZNet 9.1.1 and earlier, Silicon Labs' Zigbee stack, mishandles a malformed Publish Price Matrix command, causing an out-of-bounds write. The sources say this could lead to remote code execution on affected devices, but only from a device already joined to the network.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only devices built on EmberZNet 9.1.1 or earlier that support the Price Cluster are affected. The attacker must already be a device joined to the Zigbee network, so networks where only trusted devices can join are lower risk. Teams that do not ship Zigbee devices or gateways built on EmberZNet can skip it.
No product ranges from the sources yet.
unknown if the sources do not say which build your product includes.unknown if the sources do not say how to confirm this from the device.9.1.1: unknown if the sources do not name the fixed version.unknown.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.
This page as .md · .json · in your agent: get_signal("CVE-2026-94502")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.