cve.bz

CVE-2026-8374

8.5 highEPSS 0.09%

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

CVSS 4.0
8.5CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/S:P/AU:N/R:I/V:D/RE:H/U:Red
EPSS
0.09% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-25)
CWEs
CWE-1204, CWE-1240
Published
Modified
Record from
the NVD, synced

References

Check your stackJSON