Vendor
Silicon Labs vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 35 vulnerabilities in Silicon Labs: 0 in the last 7 days and 16 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-107359, was published on 5 November 2026. 9 vulnerabilities in the last four weeks, up from none in the four before. 2 technologies have a page of their own.
- Last 7 days
- 0
- Last 90 days
- 16
- Critical, all time
- 0
- Exploited in the wild
- 0
About Silicon Labs
Silicon Labs is a semiconductor company that develops silicon, software, and solutions for the Internet of Things.
Silicon Labs technologies
Latest Silicon Labs vulnerabilities
- CVE-2026-107359: Silicon Labs WF200 denial of service in beacon handlerinfo
- CVE-2026-94502: Silicon Labs EmberZNet out-of-bounds write in Price clusterinfo
- CVE-2026-89410: Silicon Labs Z-Wave SDK out-of-bounds read in NCP Serial APIinfo
- CVE-2026-89409: Silicon Labs Z-Wave SDK unvalidated message handling in node removalinfo
- CVE-2026-85080: Silicon Labs EmberZNet out-of-bounds write in Group Clusterinfo
- CVE-2026-85079: Silicon Labs EmberZNet out-of-bounds write in Simple_Desc_reqinfo
- CVE-2026-66282: Silicon Labs EmberZNet denial-of-service in Price Clusterinfo
- CVE-2026-66281: Silicon Labs EmberZNet denial-of-service in Discover Attributesinfo
- CVE-2026-66279: Silicon Labs Connect SDK and Flex SDK authentication bypass in MAC parserinfo
- CVE-2026-15419: Silicon Labs silabser.sys kernel pool corruptioninfoEPSS 0.2%
- CVE-2026-15418: Silicon Labs CP210x silabser.sys information leak in kernel pool memoryinfoEPSS 0.1%
- CVE-2026-15417: Silicon Labs CP210x silabser.sys kernel crash via incorrect driver settingsinfoEPSS 0.1%
- CVE-2026-16769: Silicon Labs RS9116W/SiWx917 denial of service via unencrypted pause requestinfoEPSS 0.1%
- CVE-2026-14366: Silicon Labs SiWx917 WiFi driver double-free in transmit callbackmediumCVSS 6.4EPSS 0.2%
- CVE-2026-5706: Silicon Labs Bluetooth Mesh SDK stack corruption from extended advertisementsinfoCVSS 7.5EPSS 0.4%
- CVE-2026-17610: Silicon Labs SiSDK denial of service in multiprotocol modeinfoEPSS 0.2%
- CVE-2026-6924: Silicon Labs SiWx917 Predictable Seed in Matter DRBGinfoCVSS 8.7
- CVE-2026-4930: Silicon Labs SiXG301 insufficient entropy in SYMCRYPTO DPA countermeasuresinfoCVSS 7.1
- CVE-2026-6432: Silicon Labs EmberZNet SDK improper bounds validationinfoCVSS 5.3
- CVE-2026-4526: Silicon Labs EmberZNet out-of-bounds read in ZCL parsing logicinfoCVSS 7.1
- CVE-2026-47154: Silicon Labs EmberZNet out-of-bounds read in Simple Metering clusterinfoCVSS 7.1
- CVE-2026-47153: Silicon Labs EmberZNet divide-by-zero in Level Control Step commandinfoCVSS 7.1
- CVE-2026-47152: Silicon Labs EmberZNet divide-by-zero in Level Control clusterinfoCVSS 7.1
- CVE-2026-47151: Silicon Labs EmberZNet out-of-bounds write in Door Lock clusterinfoCVSS 7.1
- CVE-2026-47150: Silicon Labs EmberZNet out-of-bounds write in IAS Zone enrollmentinfoCVSS 7.1
Most severe Silicon Labs vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-8676: Silicon Labs Bluetooth LE authentication bypass via bond spoofinghighCVSS 8.8
- CVE-2025-12131: Silicon Labs 802.15.4 stack denial of service via truncated packetmediumCVSS 6.5EPSS 0.2%
- CVE-2026-14366: Silicon Labs SiWx917 WiFi driver double-free in transmit callbackmediumCVSS 6.4EPSS 0.2%
- CVE-2026-6924: Silicon Labs SiWx917 Predictable Seed in Matter DRBGinfoCVSS 8.7
- CVE-2026-2815: Silicon Labs EFR32xG27 Predictable Key Generation in SiSDKinfoCVSS 8.4
- CVE-2026-5706: Silicon Labs Bluetooth Mesh SDK stack corruption from extended advertisementsinfoCVSS 7.5EPSS 0.4%
- CVE-2026-3290: Silicon Labs RS9116 predictable HRNG values in power save modeinfoCVSS 7.4
- CVE-2026-4930: Silicon Labs SiXG301 insufficient entropy in SYMCRYPTO DPA countermeasuresinfoCVSS 7.1
- CVE-2026-4526: Silicon Labs EmberZNet out-of-bounds read in ZCL parsing logicinfoCVSS 7.1
- CVE-2026-47154: Silicon Labs EmberZNet out-of-bounds read in Simple Metering clusterinfoCVSS 7.1
Vulnerabilities per week
9 vulnerabilities in the last four weeks, up from none in the four before. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 2 | 0 | |
| 31 Aug 2026 | 1 | 0 | |
| 7 Sep 2026 | 4 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 8 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 1 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Silicon Labs vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/silicon-labs)<a href="https://junglewise.ai/threats/vendors/silicon-labs"><img src="https://junglewise.ai/threats/vendors/silicon-labs/badge.svg" alt="Silicon Labs vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/silicon-labs.json, and this page as text at https://junglewise.ai/threats/vendors/silicon-labs.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Silicon Labs vulnerabilities", https://junglewise.ai/threats/vendors/silicon-labs, 13 November 2026.