CVE-2026-8676

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond...

CVE-2026-8676

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond...

CVE-2026-8676

CVE-2026-8676 describes a vulnerability in Bluetooth Low Energy bonding where an attacker can downgrade security by deleting an existing bond, spoofing the bonded device, and establishing a new bond. The CVSS v3.1 vector indicates an Adjacent attacker, no privileges, low attack complexity, with h...

CVE-2026-8676

An attacker is able to downgrade the security of a Bluetooth LE connection by deleting an existing bond, spoofing the bonded device and creating a new bond...

EUVD-2020-7501

Malware in sbrugna...

CVE-2020-15509

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

CVE-2020-15509

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

Code injection

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

CVE-2020-15509

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

CVE-2020-15509

CVE-2020-15509 affects Nordic Semiconductor Android BLE Library up to 2.2.1 and the DFU Library up to 1.10.4 (used by nRF Connect and others). The issue is unencrypted communication being presented as encrypted, originating from the bond creation path (e.g., internalCreateBond in BleManagerHandle...

PT-2020-14468

Name of the Vulnerable Software and Affected Versions Nordic Semiconductor Android BLE Library versions 2.2.1 and earlier Nordic Semiconductor Android DFU Library versions 1.10.4 and earlier Description The issue allows the library to engage in unencrypted communication while indicating to the us...

CVE-2020-15509: Cleartext Transmission of Sensitive Information

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...