CVE-2026-8374 — Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication

CVE-2026-8374

Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication PUBLISHED

Description (CNA)

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

Affected (CNA)

Vendor / product	Versions
SwitchBot / Lock Series Lock	affected 0 through 3.4
SwitchBot / Lock Series Keypad	affected 0 through 2.7
SwitchBot / Lock Series App	affected 0 through 9.2.6

CWE

CWE-1204, CWE-1240

References

https://neodyme.io/en/advisories/cve-2026-8374/
https://neodyme.io/en/blog/switchbot/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.