CVE-2026-94502

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...

CVE-2026-66282

In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end condition. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...

EUVD-2026-108184

In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...

CVE-2026-94502

EmberZNet version 9.1.1 and earlier are vulnerable to an out-of-bounds write flaw within the Zigbee Publish Price Matrix handling logic. A malformed Publish Price Matrix command can trigger this vulnerability, potentially resulting in remote code execution . This issue specifically impacts device...

EUVD-2026-108182

In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end condition. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...

CVE-2026-66282

EmberZNet 9.1.1 and earlier versions are vulnerable to an authenticated Denial-of-Service condition. A malformed Publish Billing Period command can trigger a recursive function call that fails to reach an end condition (CWE-674 ). This issue specifically impacts devices supporting the Price Clust...