Read the docs

SwitchBot

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

SwitchBot records in CISA KEV

No SwitchBot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hub2 Firmware 1 record MEDIUM

Records

4 records

TI-2023-22515 CVE-2023-42189 · GHSA-gg6j-gxcg-jjcm

Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK…

Priority MEDIUM 41

Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01024 Published 2023-10-10 No fix listed CWE-732
TI-2026-69978 CVE-2026-8374 · GHSA-33hw-v5j3-gx3r

Cryptographic misuse in SwitchBot Bluetooth allows lock bypass

Priority LOW 37

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

CVSS 4.0HIGH 8.5 Local No auth No interaction EPSS 0.00089 Published 2026-10-09 Fixed in 7.7, 3.7 +6 CWE-1204
Open these records in search →