CVE-2026-16769
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An unencrypted 'pause encryption request' message causes a denial of service in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper.
Risk Assessment
An attacker can remotely cause device unavailability, potentially disrupting systems using these chips. The lack of encryption facilitates the attack.
Recommendation
Apply patches or mitigations recommended by the manufacturer for RS9116W/SiWx917. Restrict network access to devices using these chips.
Other vulnerabilities in RS9116W/SiWx917
See all- CVE-2026-65936Medium
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.
- CVE-2026-65935High
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below.
- CVE-2026-16101High
Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below
Original NVD description (English source)
An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS