Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: SwitchBot Clear all filters
TI-2026-69978 CVE-2026-8374 · GHSA-33hw-v5j3-gx3r

Cryptographic misuse in SwitchBot Bluetooth allows lock bypass

Priority LOW 37

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

CVSS 4.0HIGH 8.5 Local No auth No interaction EPSS 0.00089 Published 2026-10-09 Fixed in 7.7, 3.7 +6 CWE-1204
TI-2023-22515 CVE-2023-42189 · GHSA-gg6j-gxcg-jjcm

Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK…

Priority MEDIUM 41

Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01024 Published 2023-10-10 No fix listed CWE-732