7.6High
CVE-2026-65935Bypassing passkey entry in legacy pairing
Description
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below.
Weakness (CWE):
CWE-305
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| silabs.com | WiseConnect | 2.0.0 – ≤ 2.*.*, 4.0.0 – ≤ 4.*.* |