Information Leakage Vulnerability in RS9116W/SiWx917 by Silicon Labs
CVE-2026-65936

5.3MEDIUM

Key Information:

Vendor

Silabs.com

Status
Wiseconnect
Vendor
CVE Published:
13 August 2026

What is CVE-2026-65936?

A vulnerability exists in the RS9116W and SiWx917 products from Silicon Labs, caused by a malformed Bluetooth connection request message. This flaw can potentially lead to the leakage of sensitive information, exposing data that should remain confidential. Users of these products are advised to review security measures and stay updated on any patches or mitigations provided by the vendor. For further details, refer to the vulnerability documentation and related research paper.

Affected Version(s)

WiseConnect 2.0.0 <= 2.*.*

WiseConnect 4.0.0 <= 4.*.*

References

https://community.silabs.com/068Vm00000x0Yqy
vendor-advisorypermissions-required
https://arxiv.org/pdf/2409.02905
related

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.