Skip to content
Sign in
6.0 Medium

CVE-2026-66282 In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call…

Description

In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end condition. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted.

Affected products and versions

Product Affected versions Fixed in
EmberZNet 9.1 earliest → 9.1.1 No fix stated

Other CVEs of EmberZNet

The 17 CVEs of EmberZNet →
CVE-2026-85079 In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially… 7.5 High CVE-2026-94502 In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write… 7.5 High CVE-2026-66281 In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit… 6.0 Medium CVE-2026-85080 In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a… 6.0 Medium
Track this CVE