High severity · published Aug 13, 2026
CVE-2026-16101
forced re-pairing with already bonded device
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
WiseConnect · silabs.com
4.0.0 before 4.1.0; 2.0.0 before 2.14.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-16101
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-16101
community.silabs.com
https://community.silabs.com/068Vm00000x0yyH
docs.silabs.com
https://docs.silabs.com/rs9116-wiseconnect/latest/wifibt-wc-release-notes/rs9116-ble-release-notes#bug-fixes
docs.silabs.com
https://docs.silabs.com/sisdk-release-notes/latest/sisdk-wifi-release-notes/sisdk-wifible-ble-release-notes
www.ndss-symposium.org
https://www.ndss-symposium.org/ndss-paper/blerp-ble-re-pairing-attacks-and-defenses/
More from WiseConnect
8.8
CVE-2026-19293
SMP security request
8.8
CVE-2026-19292
Bluetooth re-pairing with legitimate device can use lower security level
8.8
CVE-2026-19291
Bluetooth re-pairing can use a lower security level than previous
7.6
CVE-2026-65935
Bypassing passkey entry in legacy pairing
6.0
CVE-2025-3873
Buffer overflow in Si91x crypto APIs