CVE-2026-19292highCWE-305

CVE-2026-19292: falha de alta gravidade em silabs.com WiseConnect

Bluetooth re-pairing with legitimate device can use lower security level

Publicada em

Seguir esta CVE+ Monitorar WiseConnect

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.4%
Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
silabs.com · WiseConnect
CVEs relacionadas — silabs.com WiseConnect

No mesmo produto, das mais perigosas para as menos.

CVE-2025-3873MEDIUMBuffer overflow in Si91x crypto APIsEPSS 0.4%CVE-2026-19291HIGHBluetooth re-pairing can use a lower security level than previousEPSS 0.4%CVE-2026-16101HIGHforced re-pairing with already bonded deviceEPSS 0.4%CVE-2026-65935HIGHBypassing passkey entry in legacy pairingEPSS 0.3%CVE-2026-65936MEDIUMRS9116W/SiWx917 malformed packet with increased length field causes memory leakEPSS 0.3%CVE-2026-19293HIGHSMP security requestEPSS 0.2%