CVE-2026-8374: Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication
Published Oct 9, 2026
·Updated
Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.
Affected Software
1 affected component
switchBot Door Lock Series
Event History
Oct 9, 2026
CVE Published
via MITRE·12:09 PM
Data Sourced
via MITRE·12:09 PM
DescriptionWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need in order to exploit this issue?
The issue is exploitable through a manipulated Bluetooth communication protocol. The provided information does not specify any required credentials, pairing state, proximity, or user interaction.
2
What is the potential impact if exploitation succeeds?
An attacker may bypass the electronic lock and its access controls. This could allow unauthorized access through an affected SwitchBot Door Lock Series device.