CVE Catalog
CVE-2026-65935
HighCVSS 7.6Summary
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below.
Risk Assessment
An attacker can bypass the pairing process and gain unauthorized access to the device or data, potentially leading to confidentiality and integrity breaches in communication.
Recommendation
It is recommended to update the firmware of RS9116W and SiWx917 devices to a version that includes the fix. If not possible, restrict the use of legacy pairing and apply stronger authentication methods.
Original NVD description (English source)
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below.