CVE-2026-85080

In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a crash. A limited number of values can be written using this vulnerability, so no route to remote code execution was observed. These messages must come from a device that has already joined the network. Only devices supporting the Group Cluster are impacted.

• CWE-121

• https://github.com/SiliconLabsSoftware/docs-security-advisories/blob/main/Advisories/500-599/A-00000590.md

Published

Oct 22, 2026

Last Modified

Oct 23, 2026

Status

Undergoing Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-85063node-csv is a full-featured CSV parser with a simple API tha…6.9
• CVE-2026-8507Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have o…9.8
• CVE-2026-85077Sanic is an opensource python web server/framework. Prior to…8.2
• CVE-2026-85078Sanic is an opensource python web server/framework. In versi…6.5
• CVE-2026-85079In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req …7.5
• CVE-2026-8508An improper authentication vulnerability in the "social_logi…6.5
• CVE-2026-85081The File Manager WordPress plugin before 8.0.5, FileOrganize…7.5
• CVE-2026-85082Root Browser Classic 3.3.0 passes the path of a selected SQL…8.5
• CVE-2026-85083The ANJIA AJL33PC0801 IP camera uses a hard-coded credential…6.8
• CVE-2026-85084Out-of-bounds Write and Improper Validation of Array Index v…6.3
• CVE-2026-85085The Canva Android App before 2.376.0 allowed an external ori…9.6
• CVE-2026-85086Improper certificate validation, Initialization of a resourc…6.9