CVE-2026-65936
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.
Risk Assessment
An attacker could exploit this vulnerability to gain access to sensitive data transmitted over Bluetooth.
Recommendation
Apply patches or firmware updates provided by the manufacturer for RS9116W/SiWx917 chips.
Other vulnerabilities in RS9116W/SiWx917
See all- CVE-2026-16769High
An unencrypted 'pause encryption request' message causes a denial of service in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper.
- CVE-2026-65935High
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below.
- CVE-2026-16101High
Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below
Original NVD description (English source)
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS