GCVE-1988-2026-0361
Vulnerability from gna-1988 – Published: 2026-09-11 07:55 – Updated: 2026-09-11 07:55
VLAI
EPSS
VEX
Title
APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211
Beats Firmware Update 1B211 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/127557.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Bluetooth
Available for: Beats Studio Buds
Impact: An attacker within Bluetooth range may be able to listen through
the microphone of a device which is not yet paired and actively seeking
pair requests
Description: This is a vulnerability in open source code and Apple
Software is among the affected projects. The CVE-ID was assigned by a
third party. Learn more about the issue and CVE-ID at cve.org.
CVE-2025-20701: Dennis Heinze and Frieder Steinmetz of ERNW GmbH
Firmware updates are automatically delivered while your headphones
are paired with and in Bluetooth range of your iPhone, iPad, or Mac.
You can check the firmware version of your wireless headphones in
Bluetooth settings on your device. On iPhone or iPad, go to
Settings > Bluetooth. On Mac, go to System Settings > Bluetooth.
Then tap the info button next to your headphones.
Learn more about firmware updates for Beats at
https://support.apple.com/102368
All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----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=3VzD
-----END PGP SIGNATURE-----
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Assigner
References
8 references
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| unknown | APPLE-SA-06-16-2026-1 Beats Firmware |
Affected:
unknown
|
guessed |
Relationships
reference
GCVE-1988-2026-0361 (this record)
- related CVE-2025-20701
{
"containers": {
"cna": {
"affected": [
{
"product": "APPLE-SA-06-16-2026-1 Beats Firmware",
"vendor": "unknown",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Apple Product Security via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-06-16-2026-1 Beats Firmware Update 1B211\n\nBeats Firmware Update 1B211 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/127557.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nBluetooth\nAvailable for: Beats Studio Buds\nImpact: An attacker within Bluetooth range may be able to listen through\nthe microphone of a device which is not yet paired and actively seeking\npair requests\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2025-20701: Dennis Heinze and Frieder Steinmetz of ERNW GmbH\n\nFirmware updates are automatically delivered while your headphones\nare paired with and in Bluetooth range of your iPhone, iPad, or Mac. \n\nYou can check the firmware version of your wireless headphones in\nBluetooth settings on your device. On iPhone or iPad, go to\nSettings \u003e Bluetooth. On Mac, go to System Settings \u003e Bluetooth.\nThen tap the info button next to your headphones.\n\nLearn more about firmware updates for Beats at\nhttps://support.apple.com/102368\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\njKhzH+nc1vRkc7SBx2qBDAGoAwJfby3et9iocfJYtLWT2/nREa4=\n=3VzD\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
}
],
"providerMetadata": {
"dateUpdated": "2026-09-11T07:55:57Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jun/18"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Jun/18"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.apple.com/100100"
},
{
"url": "https://support.apple.com/102368"
},
{
"url": "https://support.apple.com/en-us/127557"
},
{
"url": "https://www.apple.com/support/security/pgp/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Jun/18"
],
"discovery": "EXTERNAL"
},
"title": "APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2025-20701",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0361",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jun/18",
"automated": true,
"contentSha256": "befc7ee2d4f9c331796dcafc2f8bd7366acd368a2e3d858ec40f1a2ec49d0d48",
"evidenceScore": 6,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Jun/18",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-06-16T22:21:35Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0361"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-09-11T07:55:57Z",
"dateUpdated": "2026-09-11T07:55:57Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0361"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…