CVE-2025-32886

5.5 mediumEPSS 0.1%

Medium (5.5) in gotenna. EPSS 0.1% chance of exploitation in the next 30 days.

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing someone with local access to gain information about the protocol and intercept sensitive data.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-923
Published: 2025-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gotenna:gotenna
gotenna:mesh_firmware

References

https://github.com/Dollarhyde/goTenna_v1_and_Mesh_vulnerabilities
https://gotenna.com

Check your stack JSON