CVE-2026-65935CWE-305

CVE-2026-65935

published August 13, 2026

CVSS

7.6

EPSS

0%

Percentile

15.8

In the wild

Unconfirmed

What it is

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value.

See vulnerability B-E3 in the related paper below.

The record

Technical detail

CVSS: 7.6 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00252 · 15.8th percentile
Weakness: CWE-305 · Authentication Bypass by Primary Weakness
Published: 2026-08-13T19:19Z

References (2)

https://arxiv.org/pdf/2409.02905 · [email protected]https://community.silabs.com/068Vm00000x0Yqy · [email protected]

EPSS history

Timeline

13 AUG 14:24Z
Bypassing passkey entry in legacy pairing
cvelistv5