Is CVE-2026-47145 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-47145 being exploited in the wild.

How severe is CVE-2026-47145?

Informational severity, with a CVSS score of 7.1, published 25 June 2026.

Which products and versions are affected?

Silicon Labs EmberZNet v9.0.2 and earlier.

Is there a fix for CVE-2026-47145?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-47145 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-47145?

Check whether you run Silicon Labs EmberZNet at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-47145: Silicon Labs EmberZNet denial of service in Color Control cluster

CVE-2026-47145 · Severity: info · CVSS 7.1 · Published 2026-06-25

A vulnerability in Silicon Labs EmberZNet software, which is used to manage Zigbee wireless networks, could allow an attacker to crash connected devices. By sending a specially crafted message related to color lighting controls, an attacker who has already gained access to the network can force a device to shut down or restart. This results in a loss of control over smart lighting or other Zigbee-enabled hardware until the system is recovered.

Technologies: Silicon Labs EmberZNet. Vendors: Silicon Labs.

Quick answers

Is CVE-2026-47145 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-47145 being exploited in the wild.
How severe is CVE-2026-47145?: Informational severity, with a CVSS score of 7.1, published 25 June 2026.
Which products and versions are affected?: Silicon Labs EmberZNet v9.0.2 and earlier.
Is there a fix for CVE-2026-47145?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-47145 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-47145?: Check whether you run Silicon Labs EmberZNet at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Reachable Assertion (CWE-617) exists in Silicon Labs EmberZNet versions up to and including v9.0.2 within the Color Control cluster implementation. An attacker with low privileges (already joined to the Zigbee network) can send malformed Color Control messages to a target device. If the device supports the Color Control cluster, the malformed input triggers an internal software assertion, causing the process to terminate and resulting in a denial of service (DoS). The vulnerability is reachable over the network without user interaction, provided the attacker is an authenticated node on the network.

Affected products

Silicon Labs EmberZNet v9.0.2 and earlier

Timeline

2026-06-25: disclosed: Initial NVD publication date
2026-06-25: advisory: Silicon Labs advisory released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.