CVE Catalog
CVE-2026-8676
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.20%
10th percentile - higher than 10% of all known CVEs
Summary
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.
Risk Assessment
An attacker could intercept Bluetooth communication or gain unauthorized access to the device.
Recommendation
Apply patches from the Bluetooth device manufacturer and consider using pairing modes with downgrade protection.
Other vulnerabilities in Bluetooth LE
Original NVD description (English source)
An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS