CVE-2026-16101

Published: Ago 13, 2026 Last Modified: Ago 13, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,8
Source: [email protected]
Attack Vector: adjacent_network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below

290

Authentication Bypass by Spoofing

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Access Control
Potential Impacts:
Bypass Protection Mechanism Gain Privileges Or Assume Identity
Applicable Platforms
All platforms may be affected
View CWE Details
https://community.silabs.com/068Vm00000x0yyH
https://community.silabs.com/068Vm00000x0yyH
https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-wc…
https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-wc-release-notes/rs911…
https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wi…
https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wifi-release-notes/sis…
https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pair…
https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defe…