CVE-2026-65934
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below.
Risk Assessment
An attacker can send a specially crafted message to cause unavailability of the BT122 module, potentially disrupting devices using this Bluetooth technology.
Recommendation
It is recommended to update the BT122 module firmware to a version that includes the fix. If not possible, restrict access to the device and monitor unusual Bluetooth traffic.
Other vulnerabilities in BT122
See all- CVE-2026-65933Medium
A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.
- CVE-2026-65932Medium
The BT122 module stops advertising after receiving a plaintext 'pause encryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below.
Original NVD description (English source)
An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS