First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-12131

MediumCVSS 6.5/10Last modified Aug 20, 2026

Description

A truncated 802.15.4 packet can lead to an assert, resulting in a denial of service.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
silabs.com	EmberZNet SDK	>= 8.0.0, < 9.0.0; < 7.5.2

References

https://community.silabs.com/068Vm00000g8dP3Permissions Required

Timeline

Published: Feb 5, 2026
Last modified: Aug 20, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-121324.3The WP Custom Admin Login Page Logo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1 CVE-2025-121334.3The EPROLO Dropshipping plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wp_CVE-2025-121345.3The ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns plugin for WordPress is vulnerabl CVE-2025-121357.2The WPBookit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css_code' parameter in all versions up to, and inclu CVE-2025-121366.8The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up CVE-2025-121374.9The Import WP – Export and Import CSV and XML files to WordPress plugin for WordPress is vulnerable to Arbitrary File Read in all versions u CVE-2025-121388.8The URL Image Importer plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions CVE-2025-121397.5The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposu CVE-2025-12148.8A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file /user_accounts.php?CVE-2025-121409.3The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter.CVE-2025-121416.5In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “CVE-2025-121426.1Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wal

CVE-2025-12131: Medium severity, CVSS 6.5 | Vulnix