Medium severity · published Aug 13, 2026
CVE-2026-65936
RS9116W/SiWx917 malformed packet with increased length field causes memory leak
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.
See vulnerability B-E4 in the related paper below.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
WiseConnect · silabs.com
2.0.0 through 2.*.*; 4.0.0 through 4.*.* · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-65936
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-65936
arxiv.org
https://arxiv.org/pdf/2409.02905
community.silabs.com
https://community.silabs.com/068Vm00000x0Yqy
More from WiseConnect
8.8
CVE-2026-19293
SMP security request
8.8
CVE-2026-19292
Bluetooth re-pairing with legitimate device can use lower security level
8.8
CVE-2026-19291
Bluetooth re-pairing can use a lower security level than previous
8.8
CVE-2026-16101
forced re-pairing with already bonded device
7.6
CVE-2026-65935
Bypassing passkey entry in legacy pairing