Is CVE-2026-47152 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-47152 being exploited in the wild.

How severe is CVE-2026-47152?

Informational severity, with a CVSS score of 7.1, published 25 June 2026.

Which products and versions are affected?

Silicon Labs EmberZNet v9.0.2 and earlier.

Is there a fix for CVE-2026-47152?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-47152 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-47152?

Check whether you run Silicon Labs EmberZNet at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-47152: Silicon Labs EmberZNet divide-by-zero in Level Control cluster

CVE-2026-47152 · Severity: info · CVSS 7.1 · Published 2026-06-25

Silicon Labs EmberZNet, a software suite used to develop Zigbee-based smart home and industrial IoT devices, is vulnerable to a flaw that can cause devices to crash. An attacker with a device already connected to the network can send a specifically crafted command that forces the target device to restart or stop functioning. This results in a loss of service for the affected smart devices until they are recovered.

Technologies: Silicon Labs EmberZNet. Vendors: Silicon Labs.

Quick answers

Is CVE-2026-47152 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-47152 being exploited in the wild.
How severe is CVE-2026-47152?: Informational severity, with a CVSS score of 7.1, published 25 June 2026.
Which products and versions are affected?: Silicon Labs EmberZNet v9.0.2 and earlier.
Is there a fix for CVE-2026-47152?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-47152 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-47152?: Check whether you run Silicon Labs EmberZNet at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A divide-by-zero vulnerability (CWE-369) exists in Silicon Labs EmberZNet versions v9.0.2 and earlier within the handling of Zigbee Level Control cluster commands. Specifically, a malformed 'Level Control Move' command can trigger a process termination due to a mathematical error during processing. An attacker must already have a device joined to the Zigbee network (PR:L) to issue the command. The impact is limited to a denial-of-service (DoS) of the affected process on devices supporting the Level Control cluster. Users are advised to monitor Silicon Labs releases for patches following v9.0.2.

Affected products

Silicon Labs EmberZNet v9.0.2 and earlier

Timeline

2026-06-25: disclosed
2026-06-25: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.