CVE-2026-8374

Published: Ott 09, 2026 Last Modified: Ott 09, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,5
Source: a341c0d1-ebf7-493f-a84e-38cf86618674
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0009
Percentile
0,0th
Updated

EPSS Score Trend (Last 2 Days)

1204

Generation of Weak Initialization Vector (IV)

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality
Potential Impacts:
Read Application Data
Applicable Platforms
All platforms may be affected
View CWE Details
1240

Use of a Cryptographic Primitive with a Risky Implementation

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality
Potential Impacts:
Read Application Data
Applicable Platforms
Technologies: System on Chip
View CWE Details
https://neodyme.io/en/advisories/cve-2026-8374/
https://neodyme.io/en/advisories/cve-2026-8374/
https://neodyme.io/en/blog/switchbot/
https://neodyme.io/en/blog/switchbot/