CVE-2026-16101

HighCVSS 8.8

Published: 13/08/2026(UTC)Updated: 13/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below

Risk Assessment

An attacker can impersonate a trusted device and hijack the Bluetooth session, potentially leading to confidentiality and integrity breaches of data exchanged between devices.

Recommendation

Update the firmware of RS9116W and SiWx917 to prevent re-pairing with unauthorized devices. Implement mutual authentication mechanisms.

Original NVD description (English source)

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below