CVE-2026-65935

HIGH

CVE: CVE-2026-65935 - Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key valueSign in to save

CVSS

7.6

CVSS v4.0

EPSS

N/A

Exploit Prediction Score

Published

August 13, 2026

Exploitability

No EPSS data available

Description

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below.

Weaknesses

CWE-305

Affected Packages

No package data available.

Aliases

CVE-2026-65935

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://arxiv.org/pdf/2409.02905
https://community.silabs.com/068Vm00000x0Yqy