CVE-2026-8374
NoneCVSS
—
EPSS
—
Published
Oct 9, 2026
CISA due date
—
The record
Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-5087 PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates… CWE-1204
- CVE-2026-25998 strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. CWE-1204
- CVE-2026-50303 Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows… CWE-1240
- CVE-2026-46654 Plonky3 is a toolkit for polynomial IOPs (PIOPs). CWE-1240
- CVE-2026-44410 This vulnerability stems from a business logic flaw.Attackers can exploit legitimate… CWE-1240
- GHSA-vj64-rjf3-w3v7 Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss CWE-1240
- CVE-2026-29146 Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default… CWE-1240
- CVE-2025-64647 IBM Concert 1.0.0 through 2.2.0 uses weaker than expected cryptographic algorithms that… CWE-1240