Skip to content
OpenAdvisories
High · 8.5 CVE-2026-8374 EUVD-2026-95745GHSA-33hw-v5j3-gx3r

Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication

Published Oct 9, 2026 · Updated Oct 30, 2026 · Assigned by cirosec

Description

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

Affected products

VendorProductAffectedFixed
SwitchBot SwitchBot Lock < 7.7 7.7
SwitchBot SwitchBot Lock Pro < 3.7 3.7
SwitchBot SwitchBot Lock Wifi < 15.21 15.21
SwitchBot SwitchBot Lock Ultra < 2.8 2.8
SwitchBot SwitchBot Lock Lite < 7.7 7.7
SwitchBot SwitchBot Keypad < 2.9 2.9
SwitchBot SwitchBot Keypad Touch < 2.9 2.9
SwitchBot SwitchBot Keypad Vision < 2.5 2.5
SwitchBot SwitchBot Keypad Vision Pro < 1.0 1.0
SwitchBot SwitchBot App < 9.18 9.18

References