CVE-2026-19291highCWE-290

CVE-2026-19291: falha de alta gravidade em silabs.com WiseConnect

Bluetooth re-pairing can use a lower security level than previous

Publicada em

Seguir esta CVE+ Monitorar WiseConnect

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.4%
Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
silabs.com · WiseConnect
CVEs relacionadas — silabs.com WiseConnect

No mesmo produto, das mais perigosas para as menos.

CVE-2025-3873MEDIUMBuffer overflow in Si91x crypto APIsEPSS 0.4%CVE-2026-19292HIGHBluetooth re-pairing with legitimate device can use lower security levelEPSS 0.4%CVE-2026-16101HIGHforced re-pairing with already bonded deviceEPSS 0.4%CVE-2026-65935HIGHBypassing passkey entry in legacy pairingEPSS 0.3%CVE-2026-65936MEDIUMRS9116W/SiWx917 malformed packet with increased length field causes memory leakEPSS 0.3%CVE-2026-19293HIGHSMP security requestEPSS 0.2%