Is CVE-2026-4526 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-4526 being exploited in the wild.

How severe is CVE-2026-4526?

Informational severity, with a CVSS score of 7.1, published 25 June 2026.

Which products and versions are affected?

Silicon Labs EmberZNet 0 to 9.0.2.

Is there a fix for CVE-2026-4526?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-4526 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-4526?

Check whether you run Silicon Labs EmberZNet at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-4526: Silicon Labs EmberZNet out-of-bounds read in ZCL parsing logic

CVE-2026-4526 · Severity: info · CVSS 7.1 · Published 2026-06-25

Silicon Labs EmberZNet, a software stack used for Zigbee wireless networking, contains a vulnerability that can cause devices to crash. An attacker who has already gained access to the Zigbee network can send a specially crafted message that forces the device to restart or stop functioning. This results in a denial-of-service, potentially disrupting smart home or industrial automation systems, though no data theft has been observed.

Technologies: Silicon Labs EmberZNet. Vendors: Silicon Labs.

Quick answers

Is CVE-2026-4526 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-4526 being exploited in the wild.
How severe is CVE-2026-4526?: Informational severity, with a CVSS score of 7.1, published 25 June 2026.
Which products and versions are affected?: Silicon Labs EmberZNet 0 to 9.0.2.
Is there a fix for CVE-2026-4526?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-4526 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-4526?: Check whether you run Silicon Labs EmberZNet at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An out-of-bounds read vulnerability (CWE-125) exists in the framework parsing logic of Silicon Labs EmberZNet versions 9.0.2 and earlier. The flaw is triggered by malformed global Zigbee Cluster Library (ZCL) messages. An attacker must be authenticated (already joined to the Zigbee network) to deliver the payload via the network. Successful exploitation results in the termination of the process (Denial of Service), but does not result in information leakage or unauthorized data access. Users are advised to monitor Silicon Labs' Simplicity SDK releases for patches.

Affected products

Silicon Labs EmberZNet 0 to 9.0.2

Timeline

2026-06-25: disclosed
2026-06-25: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.