https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 00:19:35 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-109571 <p>Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37). Attackers within Bluetooth range can receive the wearer&#39;s live heart rate readings without pairing, bonding, or any confirmation on the watch.</p> <p>Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37). Attackers within Bluetooth range can receive the wearer&#39;s live heart rate readings without pairing, bonding, or any confirmation on the watch.</p> https://db.gcve.eu/vuln/fkie_cve-2026-109571 https://db.gcve.eu/vuln/ghsa-hj6p-cc45-4m6g <p>Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37). Attackers within Bluetooth range can receive the wearer&#39;s live heart rate readings without pairing, bonding, or any confirmation on the watch.</p> <p>Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37). Attackers within Bluetooth range can receive the wearer&#39;s live heart rate readings without pairing, bonding, or any confirmation on the watch.</p> https://db.gcve.eu/vuln/ghsa-hj6p-cc45-4m6g