Bluetooth LE Connection Vulnerability in Silicon Labs Products
CVE-2026-8676

8.8HIGH

Key Information:

Vendor

Silabs.com

Status
Simplicity Sdk
Vendor
CVE Published:
26 May 2026

What is CVE-2026-8676?

This vulnerability allows an attacker to compromise the integrity of a Bluetooth Low Energy (LE) connection. By deleting an existing bond and spoofing the identity of the trusted bonded device, the attacker can create a new bond with downgraded security settings. This breach can expose the connection to unauthorized access and data interception, posing significant risks to the communication integrity of affected devices.

Affected Version(s)

Simplicity SDK 0 < 2024.12.0

References

https://community.silabs.com/068Vm00000p3N9C
vendor-advisory
https://www.silabs.com/documents/public/release-notes/bt-...
release-notes

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.