CVE-2026-19292

{
  "id": "CVE-2026-19292",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-13T15:19:37.737",
  "lastModified": "2026-10-23T18:10:00.167",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Re-pairing with a legitimate device can use a lower security level than\nprevious making brute-forcing the LTK easier. See V4 in the BLERP paper linked below."
    },
    {
      "lang": "es",
      "value": "Re-emparejar con un dispositivo legítimo puede usar un nivel de seguridad inferior al anterior, lo que facilita el ataque de fuerza bruta al LTK. Véase V4 en el documento BLERP enlazado a continuación."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "silabs.com",
          "product": "WiseConnect",
          "defaultStatus": "unaffected",
          "packageName": "SiSDK",
          "versions": [
            {
              "version": "4.0.0",
              "lessThan": "4.1.0",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "2.0.0",
              "lessThan": "2.14.0",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-13T17:02:15.321784Z",
          "id": "CVE-2026-19292",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-305"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://community.silabs.com/068Vm00000x0yyH",
      "source": "[email protected]"
    },
    {
      "url": "https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-wc-release-notes/rs9116-ble-release-notes#bug-fixes",
      "source": "[email protected]"
    },
    {
      "url": "https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wifi-release-notes/sisdk-wifible-ble-release-notes",
      "source": "[email protected]"
    },
    {
      "url": "https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/",
      "source": "[email protected]"
    }
  ]
}