[ Vendor · 8 CVEs ]
Silicon Labs
CVEs affecting Silicon Labs published in the last 30 days, plus any Silicon Labs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-85080 | 22 Oct 2026 | CVSS 6.0 | Silicon Labs EmberZNetIn EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a crash. A limited number of… | |
| CVE-2026-89409 | 22 Oct 2026 | CVSS 5.3 | Silicon Labs Z-Wave SDKIn Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing checks in the… | |
| CVE-2026-89410 | 22 Oct 2026 | CVSS 5.1 | Silicon Labs Z-Wave SDKIn Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information. | |
| CVE-2026-94502 | 22 Oct 2026 | CVSS 7.5 | Silicon Labs EmberZNetIn EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code… | |
| CVE-2026-85079 | 22 Oct 2026 | CVSS 7.5 | Silicon Labs EmberZNetIn EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code… | |
| CVE-2026-66282 | 22 Oct 2026 | CVSS 6.0 | Silicon Labs EmberZNetIn EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end… | |
| CVE-2026-66279 | 22 Oct 2026 | CVSS 7.2 | Silicon Labs Connect SDKIn Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in… | |
| CVE-2026-66281 | 22 Oct 2026 | CVSS 6.0 | Silicon Labs EmberZNetIn EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit condition (infinite loop). These… |