CVE-2026-47148CWE-125

Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2

High · published June 25, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

In EmberZNet v9.0.2 and earlier, malformed GetGroupMembership commands can trigger repeated reads past the end of the message payload and terminate the process. These messages must come from a device that has already joined the network, and no information leakage back to the sender was observed. Only devices supporting the Groups cluster may be impacted.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00436 · 36.5th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-06-25T13:37Z
EPSS history
Timeline
  • 25 JUN 13:37Z
    Groups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.2
    cvelistv5