https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T00:19:34.916081+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109571 fkie_cve-2026-109571 2026-10-20T00:19:34.925810+00:00

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37). Attackers within Bluetooth range can receive the wearer's live heart rate readings without pairing, bonding, or any confirmation on the watch.

 https://db.gcve.eu/vuln/ghsa-hj6p-cc45-4m6g GHSA-hj6p-cc45-4m6g 2026-10-20T00:19:34.925887+00:00

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37). Attackers within Bluetooth range can receive the wearer's live heart rate readings without pairing, bonding, or any confirmation on the watch.