CVE-2026-47146: Color Control color-temperature assertion abort in EmberZNet v9.0.2
Published Jun 25, 2026
·Updated
In EmberZNet v9.0.2 and earlier, malformed Color Control messages can lead to asserts that terminate the process. These messages must come from a device that has already joined the network. Only devices supporting the Color Control cluster may be impacted.
Affected Software
2 affected components
EmberZNet<=9.0.2
Silabs Emberznet<=9.0.2
Event History
Jun 25, 2026
CVE Published
via MITRE·01:35 PM
Data Sourced
via MITRE·01:35 PM
DescriptionWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-47146?
The severity of CVE-2026-47146 is rated as high, with a score of 7.1.
2
How do I fix CVE-2026-47146?
To fix CVE-2026-47146, update to EmberZNet version 9.0.3 or later.
3
What type of devices are affected by CVE-2026-47146?
CVE-2026-47146 affects devices that support the Color Control cluster and have joined the network.
4
What causes the assertion abort in CVE-2026-47146?
Malformed Color Control messages from already joined devices cause assertion aborts in CVE-2026-47146.
5
Is there a known workaround for CVE-2026-47146?
There is currently no known workaround for CVE-2026-47146 other than upgrading the software.