AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-26559

HIGH · CVSS 8.8 EPSS 0.85%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-05-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-26559
Severity
HIGH
CVSS
8.8
EPSS
0.85%

Original NVD Description

Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s public key, and the confirmation number and nonce provided by the provisioning device. This could permit a device without the AuthValue to complete provisioning without brute-forcing the AuthValue.