CVE-2026-65935: falha de alta gravidade em silabs.com WiseConnect
Bypassing passkey entry in legacy pairing
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.6epss 0.3%
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value.
See vulnerability B-E3 in the related paper below.
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Produtos afetados
silabs.com · WiseConnectCVEs relacionadas — silabs.com WiseConnect
No mesmo produto, das mais perigosas para as menos.
CVE-2025-3873MEDIUMBuffer overflow in Si91x crypto APIsEPSS 0.4%CVE-2026-19292HIGHBluetooth re-pairing with legitimate device can use lower security levelEPSS 0.4%CVE-2026-19291HIGHBluetooth re-pairing can use a lower security level than previousEPSS 0.4%CVE-2026-16101HIGHforced re-pairing with already bonded deviceEPSS 0.4%CVE-2026-65936MEDIUMRS9116W/SiWx917 malformed packet with increased length field causes memory leakEPSS 0.3%CVE-2026-19293HIGHSMP security requestEPSS 0.2%