BLE Re-Pairing Vulnerability in Silicon Labs RS9116
CVE-2026-19292

8.8HIGH

Key Information:

Vendor

Silabs.com

Status
Wiseconnect
Vendor
CVE Published:
13 August 2026

What is CVE-2026-19292?

A vulnerability exists where re-pairing with a legitimate device can inadvertently lower the security level compared to previous pairings. This reduction makes it easier for attackers to execute brute-force methods on the Long Term Key (LTK), potentially compromising the integrity of the Bluetooth Low Energy (BLE) connection. Refer to the BLERP paper for a detailed analysis of this issue and recommended defense strategies.

Affected Version(s)

WiseConnect 4.0.0 < 4.1.0

WiseConnect 2.0.0 < 2.14.0

References

https://docs.silabs.com/sisdk-release-notes/latest/sisdk-...
release-notes
https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-...
release-notes
https://community.silabs.com/068Vm00000x0yyH
vendor-advisorypermissions-required

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.