CVE-2026-8676

Summary

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.

Affected Software

Weaknesses

• CWE-290: CWE-290 Authentication bypass by spoofing

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://community.silabs.com/068Vm00000p3N9C
• https://www.silabs.com/documents/public/release-notes/bt-software-release-notes-9.0.0.0.pdf

• ←Previous
• Next→