CVE-2026-8374: Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication

Published Oct 9, 2026

Updated

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

Affected Software

1 affected component

switchBot Door Lock Series

Event History

Oct 9, 2026

CVE Published

via MITRE·12:09 PM

Data Sourced

via MITRE·12:09 PM

DescriptionWeakness

Frequently Asked Questions

What does an attacker need in order to exploit this issue?

The issue is exploitable through a manipulated Bluetooth communication protocol. The provided information does not specify any required credentials, pairing state, proximity, or user interaction.

What is the potential impact if exploitation succeeds?

An attacker may bypass the electronic lock and its access controls. This could allow unauthorized access through an affected SwitchBot Door Lock Series device.

CVE-2026-8374: Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication

Affected Software

Event History

Frequently Asked Questions

What does an attacker need in order to exploit this issue?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need in order to exploit this issue?

What is the potential impact if exploitation succeeds?