CVE-2026-85080CWE-121

CVE-2026-85080

published October 22, 2026

CVSS
6.0
EPSS
0%
Percentile
27.9
In the wild
Unconfirmed
What it is

In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a crash. A limited number of values can be written using this vulnerability, so no route to remote code execution was observed. These messages must come from a device that has already joined the network. Only devices supporting the Group Cluster are impacted.

The record
Technical detail
CVSS
6.0 · NONE
CVSS v4.0
6.0 · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00354 · 27.9th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-10-22T18:17Z
References (1)
https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000590.md · [email protected]
EPSS history
Timeline
  • 24 OCT 04:04Z
    EPSS moved — → 0%
    epss
  • 22 OCT 13:42Z
    Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling
    cvelistv5
  • 22 OCT 13:42Z
    Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling
    cvelistv5