Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 05:40:41 +0000 CVE-2026-109571 — Fire-Boltt BSW013 firmware through V0.0.8 Unauthenticated Heart Rate Disclosure via BLE https://db.gcve.eu/vuln/cve-2026-109571 <p><strong>Affected:</strong> Fire-Boltt BSW013</p> <p>Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37). Attackers within Bluetooth range can receive the wearer&#39;s live heart rate readings without pairing, bonding, or any confirmation on the watch.</p> <p><strong>Affected:</strong> Fire-Boltt BSW013</p> <p>Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement characteristic (0x2A37). Attackers within Bluetooth range can receive the wearer&#39;s live heart rate readings without pairing, bonding, or any confirmation on the watch.</p> https://db.gcve.eu/vuln/cve-2026-109571