CVE-2026-65932
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
The BT122 module stops advertising after receiving a plaintext 'pause encryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below.
Risk Assessment
An attacker can cause the BT122 device to become unavailable, potentially disrupting services that rely on Bluetooth communication.
Recommendation
Apply firmware updates for the BT122 module if available, and consider restricting access to Bluetooth communication for unauthorized devices.
Other vulnerabilities in BT122
See all- CVE-2026-65934High
An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below.
- CVE-2026-65933Medium
A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.
Original NVD description (English source)
The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS