Vulnerabilities

TI-2026-15736 CVE-2026-19292 · GHSA-pv8r-xmqx-g2r9

Bluetooth re-pairing with legitimate device can use lower security level

MEDIUM 40

Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00351 Published 2026-08-13 Fixed in 4.1.0, 2.14.0 CWE-305

TI-2026-15735 CVE-2026-19291 · GHSA-8pg2-cp78-vjmv

MEDIUM 40

Bluetooth re-pairing with an existing device can use a lower security level.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00351 Published 2026-08-13 Fixed in 4.1.0, 2.14.0 CWE-290

TI-2026-13479 CVE-2026-16101 · GHSA-6jfp-5vf9-mpxj

MEDIUM 40

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00351 Published 2026-08-13 Fixed in 4.1.0, 2.14.0 CWE-290