CVE-2026-85079

High

Description

In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the attacker must wait for a Simple_Desc_req before the attack can be performed.

SeverityHigh

CVSS7.5

Exploit probability—

ProductSilabs Emberznet

PublishedOct 22, 2026

First seenOct 22, 2026

Weakness typeCWE-121CWE-121

How to fix

Vendor advisories

github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000589.md

Affected products

Product	Affected versions	Fixed in
silabs emberznet	v ≤ 9.1.1	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.