CVE-2026-4582: Shenzhen HCC Technology MPOS M6 PLUS Bluetooth missing authentication

Published Mar 23, 2026

Updated

A security vulnerability has been detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this vulnerability is an unknown functionality of the component Bluetooth. Such manipulation leads to missing authentication. The attack must be carried out from within the local network. Attacks of this nature are highly complex. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

Shenzhen HCC Technology MPOS M6 PLUS=1V.31-N

Event History

Mar 23, 2026

CVE Published

via MITRE·09:33 AM

Data Sourced

via MITRE·09:33 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:16 AM

DescriptionSeverityWeakness

Apr 7, 58249

Event

via FIRST·10:57 AM

Frequently Asked Questions

What is the severity of CVE-2026-4582?

CVE-2026-4582 is classified as a medium severity vulnerability due to its impact on Bluetooth authentication.

How do I fix CVE-2026-4582?

To fix CVE-2026-4582, update the Shenzhen HCC Technology MPOS M6 PLUS to the latest firmware version provided by the vendor.

What are the consequences of CVE-2026-4582?

The consequences of CVE-2026-4582 include potential unauthorized access due to missing authentication in the Bluetooth functionality.

Who is affected by CVE-2026-4582?

CVE-2026-4582 affects users of the Shenzhen HCC Technology MPOS M6 PLUS version 1V.31-N.

Is CVE-2026-4582 being actively exploited?

As of the latest information, there are no indications that CVE-2026-4582 is being actively exploited in the wild.