CVE-2026-109570

The Fire-Boltt BSW013 smartwatch firmware, up to version V0.0.8 , is susceptible to a missing authentication vulnerability. This flaw allows unpaired attackers within Bluetooth range to write to a proprietary BLE command characteristic that is only protected by a CRC-16/ARC checksum . By exploiti...