CVE-2026-94502CWE-121

CVE-2026-94502

published October 22, 2026

CVSS
7.5
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.

The record
Technical detail
CVSS
7.5 · NONE
CVSS v4.0
7.5 · CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00240 · 14.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-10-22T18:17Z
References (1)
https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000589.md · [email protected]
EPSS history
Timeline
  • 24 OCT 04:06Z
    EPSS moved — → 0%
    epss
  • 22 OCT 13:45Z
    Out-of-bounds write in Zigbee Publish Price Matrix handling
    cvelistv5
  • 22 OCT 13:45Z
    Out-of-bounds write in Zigbee Publish Price Matrix handling
    cvelistv5