CVE-2025-12056: Shelly Pro 3em

High severity, CVSS 8.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Out-of-bounds Read in Shelly Pro 3EM (before v1.4.4) allows Overread Buffers.

Affected products

• Shelly Pro 3em: up to and including 1.4.4

Published 2025-11-19. Last modified 2026-06-17.