# Silicon Labs vulnerabilities Source: https://junglewise.ai/threats/vendors/silicon-labs Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/silicon-labs.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 35 vulnerabilities in Silicon Labs: 0 in the last 7 days and 16 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-107359, was published on 5 November 2026. 9 vulnerabilities in the last four weeks, up from none in the four before. 2 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 9 - Last 90 days: 16 - All time: 35 (0 critical, 0 exploited in the wild) ## About Silicon Labs Silicon Labs is a semiconductor company that develops silicon, software, and solutions for the Internet of Things. ## Latest Silicon Labs vulnerabilities - [CVE-2026-107359: Silicon Labs WF200 denial of service in beacon handler](https://junglewise.ai/threats/cve-2026-107359-improper-input-validation-in-the-beacon-handler-for-wf200) (info, published 5 Nov 2026) - [CVE-2026-94502: Silicon Labs EmberZNet out-of-bounds write in Price cluster](https://junglewise.ai/threats/cve-2026-94502-in-emberznet-9-1-1-and-earlier-a-malformed-publish-price-matrix) (info, published 22 Oct 2026) - [CVE-2026-89410: Silicon Labs Z-Wave SDK out-of-bounds read in NCP Serial API](https://junglewise.ai/threats/cve-2026-89410-in-z-wave-sdk-8-1-1-and-earlier-a-malformed-ncp-spi-command-can) (info, published 22 Oct 2026) - [CVE-2026-89409: Silicon Labs Z-Wave SDK unvalidated message handling in node removal](https://junglewise.ai/threats/cve-2026-89409-in-z-wave-sdk-8-1-1-and-earlier-for-700-800-series-devices-and-6) (info, published 22 Oct 2026) - [CVE-2026-85080: Silicon Labs EmberZNet out-of-bounds write in Group Cluster](https://junglewise.ai/threats/cve-2026-85080-in-emberznet-9-1-1-and-earlier-a-malformed-getgroupmembership) (info, published 22 Oct 2026) - [CVE-2026-85079: Silicon Labs EmberZNet out-of-bounds write in Simple_Desc_req](https://junglewise.ai/threats/cve-2026-85079-in-emberznet-9-1-1-and-earlier-a-malformed-simple-desc-req) (info, published 22 Oct 2026) - [CVE-2026-66282: Silicon Labs EmberZNet denial-of-service in Price Cluster](https://junglewise.ai/threats/cve-2026-66282-in-emberznet-9-1-1-and-earlier-a-malformed-publish-billing-period) (info, published 22 Oct 2026) - [CVE-2026-66281: Silicon Labs EmberZNet denial-of-service in Discover Attributes](https://junglewise.ai/threats/cve-2026-66281-in-emberznet-9-1-1-and-earlier-a-malformed-discover-attributes) (info, published 22 Oct 2026) - [CVE-2026-66279: Silicon Labs Connect SDK and Flex SDK authentication bypass in MAC parser](https://junglewise.ai/threats/cve-2026-66279-in-connect-sdk-4-3-1-and-earlier-and-flex-sdk-3-7-7-and-earlier-a) (info, published 22 Oct 2026) - [CVE-2026-15419: Silicon Labs silabser.sys kernel pool corruption](https://junglewise.ai/threats/cve-2026-15419-silicon-labs-silabser-sys-kernel-pool-corruption) (info, published 10 Sep 2026) - [CVE-2026-15418: Silicon Labs CP210x silabser.sys information leak in kernel pool memory](https://junglewise.ai/threats/cve-2026-15418-silicon-labs-cp210x-silabser-sys-information-leak-in-kernel-pool) (info, published 10 Sep 2026) - [CVE-2026-15417: Silicon Labs CP210x silabser.sys kernel crash via incorrect driver settings](https://junglewise.ai/threats/cve-2026-15417-silicon-labs-cp210x-silabser-sys-kernel-crash-via-incorrect) (info, published 10 Sep 2026) - [CVE-2026-16769: Silicon Labs RS9116W/SiWx917 denial of service via unencrypted pause request](https://junglewise.ai/threats/cve-2026-16769-silicon-labs-rs9116w-siwx917-denial-of-service-via-unencrypted) (info, published 8 Sep 2026) - [CVE-2026-14366: Silicon Labs SiWx917 WiFi driver double-free in transmit callback](https://junglewise.ai/threats/cve-2026-14366-silicon-labs-siwx917-wifi-driver-double-free-in-transmit-callback) (medium, CVSS 6.4, published 31 Aug 2026) - [CVE-2026-5706: Silicon Labs Bluetooth Mesh SDK stack corruption from extended advertisements](https://junglewise.ai/threats/cve-2026-5706-silicon-labs-bluetooth-mesh-sdk-stack-corruption-from-extended) (info, CVSS 7.5, published 28 Aug 2026) - [CVE-2026-17610: Silicon Labs SiSDK denial of service in multiprotocol mode](https://junglewise.ai/threats/cve-2026-17610-silicon-labs-sisdk-denial-of-service-in-multiprotocol-mode) (info, published 28 Aug 2026) - [CVE-2026-6924: Silicon Labs SiWx917 Predictable Seed in Matter DRBG](https://junglewise.ai/threats/cve-2026-6924-silicon-labs-siwx917-predictable-seed-in-matter-drbg) (info, CVSS 8.7, published 23 Jul 2026) - [CVE-2026-4930: Silicon Labs SiXG301 insufficient entropy in SYMCRYPTO DPA countermeasures](https://junglewise.ai/threats/cve-2026-4930-silicon-labs-sixg301-insufficient-entropy-in-symcrypto-dpa) (info, CVSS 7.1, published 25 Jun 2026) - [CVE-2026-6432: Silicon Labs EmberZNet SDK improper bounds validation](https://junglewise.ai/threats/cve-2026-6432-silicon-labs-emberznet-sdk-improper-bounds-validation) (info, CVSS 5.3, published 25 Jun 2026) - [CVE-2026-4526: Silicon Labs EmberZNet out-of-bounds read in ZCL parsing logic](https://junglewise.ai/threats/cve-2026-4526-silicon-labs-emberznet-out-of-bounds-read-in-zcl-parsing-logic) (info, CVSS 7.1, published 25 Jun 2026) - [CVE-2026-47154: Silicon Labs EmberZNet out-of-bounds read in Simple Metering cluster](https://junglewise.ai/threats/cve-2026-47154-silicon-labs-emberznet-out-of-bounds-read-in-simple-metering) (info, CVSS 7.1, published 25 Jun 2026) - [CVE-2026-47153: Silicon Labs EmberZNet divide-by-zero in Level Control Step command](https://junglewise.ai/threats/cve-2026-47153-silicon-labs-emberznet-divide-by-zero-in-level-control-step) (info, CVSS 7.1, published 25 Jun 2026) - [CVE-2026-47152: Silicon Labs EmberZNet divide-by-zero in Level Control cluster](https://junglewise.ai/threats/cve-2026-47152-silicon-labs-emberznet-divide-by-zero-in-level-control-cluster) (info, CVSS 7.1, published 25 Jun 2026) - [CVE-2026-47151: Silicon Labs EmberZNet out-of-bounds write in Door Lock cluster](https://junglewise.ai/threats/cve-2026-47151-silicon-labs-emberznet-out-of-bounds-write-in-door-lock-cluster) (info, CVSS 7.1, published 25 Jun 2026) - [CVE-2026-47150: Silicon Labs EmberZNet out-of-bounds write in IAS Zone enrollment](https://junglewise.ai/threats/cve-2026-47150-silicon-labs-emberznet-out-of-bounds-write-in-ias-zone-enrollment) (info, CVSS 7.1, published 25 Jun 2026) ## Most severe Silicon Labs vulnerabilities - [CVE-2026-8676: Silicon Labs Bluetooth LE authentication bypass via bond spoofing](https://junglewise.ai/threats/cve-2026-8676-silicon-labs-bluetooth-le-authentication-bypass-via-bond-spoofing) (high, CVSS 8.8, published 26 May 2026) - [CVE-2025-12131: Silicon Labs 802.15.4 stack denial of service via truncated packet](https://junglewise.ai/threats/cve-2025-12131-silicon-labs-802-15-4-stack-denial-of-service-via-truncated) (medium, CVSS 6.5, published 5 Feb 2026) - [CVE-2026-14366: Silicon Labs SiWx917 WiFi driver double-free in transmit callback](https://junglewise.ai/threats/cve-2026-14366-silicon-labs-siwx917-wifi-driver-double-free-in-transmit-callback) (medium, CVSS 6.4, published 31 Aug 2026) - [CVE-2026-6924: Silicon Labs SiWx917 Predictable Seed in Matter DRBG](https://junglewise.ai/threats/cve-2026-6924-silicon-labs-siwx917-predictable-seed-in-matter-drbg) (info, CVSS 8.7, published 23 Jul 2026) - [CVE-2026-2815: Silicon Labs EFR32xG27 Predictable Key Generation in SiSDK](https://junglewise.ai/threats/cve-2026-2815-silicon-labs-efr32xg27-predictable-key-generation-in-sisdk) (info, CVSS 8.4, published 25 Jun 2026) - [CVE-2026-5706: Silicon Labs Bluetooth Mesh SDK stack corruption from extended advertisements](https://junglewise.ai/threats/cve-2026-5706-silicon-labs-bluetooth-mesh-sdk-stack-corruption-from-extended) (info, CVSS 7.5, published 28 Aug 2026) - [CVE-2026-3290: Silicon Labs RS9116 predictable HRNG values in power save mode](https://junglewise.ai/threats/cve-2026-3290-silicon-labs-rs9116-predictable-hrng-values-in-power-save-mode) (info, CVSS 7.4, published 14 May 2026) - [CVE-2026-4930: Silicon Labs SiXG301 insufficient entropy in SYMCRYPTO DPA countermeasures](https://junglewise.ai/threats/cve-2026-4930-silicon-labs-sixg301-insufficient-entropy-in-symcrypto-dpa) (info, CVSS 7.1, published 25 Jun 2026) - [CVE-2026-4526: Silicon Labs EmberZNet out-of-bounds read in ZCL parsing logic](https://junglewise.ai/threats/cve-2026-4526-silicon-labs-emberznet-out-of-bounds-read-in-zcl-parsing-logic) (info, CVSS 7.1, published 25 Jun 2026) - [CVE-2026-47154: Silicon Labs EmberZNet out-of-bounds read in Simple Metering cluster](https://junglewise.ai/threats/cve-2026-47154-silicon-labs-emberznet-out-of-bounds-read-in-simple-metering) (info, CVSS 7.1, published 25 Jun 2026) ## Vulnerabilities per week 9 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 2 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 4 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 8 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Silicon Labs technologies - [Silicon Labs EmberZNet](https://junglewise.ai/threats/technologies/emberznet): 16 vulnerabilities - [Silicon Labs SiSDK](https://junglewise.ai/threats/technologies/sisdk): 6 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Silicon Labs vulnerabilities", https://junglewise.ai/threats/vendors/silicon-labs, 13 November 2026.