CVE-2026-19291

12th percentile - higher than 12% of all known CVEs

Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below.

Lowering the security level during re-pairing in RS9116W and SiWx91x increases the risk of brute-force attacks on keys, potentially leading to Bluetooth communication confidentiality breaches.

Update the firmware of RS9116W and SiWx91x to a version that enforces the highest security level during re-pairing. Check for available patches from the manufacturer.