7.6
High
CVE-2026-65935 Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key…
Description
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WiseConnect 4.0 | 4.0.0 → latest | No fix stated |
| WiseConnect 2.0 | 2.0.0 → latest | No fix stated |
Other CVEs of WiseConnect
The 7 CVEs of WiseConnect →
CVE-2026-65936
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive…
5.3
Medium
CVE-2026-19293
SMP security request (from peripheral) does not include the maximum
encryption key size supported
8.8
High
CVE-2026-19292
Re-pairing with a legitimate device can use a lower security level than
previous making brute-forcing the LTK easier
8.8
High
CVE-2026-19291
Bluetooth re-pairing with an existing device can use a lower security level
8.8
High