EnOcean Edge Inc vulnerabilities
Published CVEs affecting EnOcean Edge Inc products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-22885
Low · 3.7
CWE-125 Feb 20, 2026
EnOcean SmartServer IoT Out-of-bounds Read
A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and
prior, which would allow remote attackers, in the LON IP-852 management
messages, to send specially crafted IP-852 messages resulting in a
memory leak from the program's memory.
CVE-2026-20761
High · 8.1
CWE-77 Feb 20, 2026
EnOcean SmartServer IoT Command Injection
A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and
prior, which would allow remote attackers, in the LON IP-852 management
messages, to send specially crafted IP-852 messages resulting in
arbitrary OS command execution on the device.