CVE-2026-112345

The T틀ock Android application (prior to version v9.8.260718 ) and its associated smart-lock firmware are vulnerable to a hardcoded static AES key issue (CWE-321). An attacker within Bluetooth range can observe the BLE pairing exchange and use the embedded defaultKey to decrypt the per-pairing ses...

CVE-2026-112345 TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure

TTLock Android application before v9.8.260718 and associated smart-lock firmware contain a hardcoded static AES key vulnerability that allows an attacker within Bluetooth range to decrypt the per-pairing session key transmitted during BLE pairing. Attackers can observe the pairing exchange, recov...