CVE-2026-65933
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.
Risk Assessment
The organization may be exposed to disclosure of confidential data transmitted over Bluetooth, potentially leading to privacy or security breaches.
Recommendation
Update the BT122 module firmware to the latest version if a patch is available, and monitor Bluetooth communications for anomalies.
Other vulnerabilities in BT122
See all- CVE-2026-65934High
An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below.
- CVE-2026-65932Medium
The BT122 module stops advertising after receiving a plaintext 'pause encryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below.
Original NVD description (English source)
A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS