7 matches found
CVE-2026-19293
SMP security request from peripheral does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below...
CVE-2026-16101
Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below...
CVE-2026-19292
The CVE-2026-19292 entry describes a Bluetooth re-pairing flow where pairing with a legitimate device can switch to a lower security level than before, making brute-force attempts on the Long-Term Key (LTK) easier. The issue is documented with CVSS 3.1 base metrics (8.8, HIGH) and an adjacent att...
EUVD-2026-57927
Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below...
EUVD-2026-57926
Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below...
CVE-2026-19291
The CVE-2026-19291 issue affects RS9116W and SiWx91x devices during Bluetooth re-pairing, where re-pairing with an existing device can use a lower security level than the previous pairing. The connection in the documents notes the problem and references the BLERP paper for details, implying a dow...