High severity · published Aug 13, 2026
CVE-2026-65935
Bypassing passkey entry in legacy pairing
7.6
CVSS
0.3%
EPSS
No
On KEV
Description
Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value.
See vulnerability B-E3 in the related paper below.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
WiseConnect · silabs.com
2.0.0 through 2.*.*; 4.0.0 through 4.*.* · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-65935
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-65935
arxiv.org
https://arxiv.org/pdf/2409.02905
community.silabs.com
https://community.silabs.com/068Vm00000x0Yqy
More from WiseConnect
8.8
CVE-2026-19293
SMP security request
8.8
CVE-2026-19292
Bluetooth re-pairing with legitimate device can use lower security level
8.8
CVE-2026-19291
Bluetooth re-pairing can use a lower security level than previous
8.8
CVE-2026-16101
forced re-pairing with already bonded device
6.0
CVE-2025-3873
Buffer overflow in Si91x crypto APIs