Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2026-8374

Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication

Description

Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SwitchBot SwitchBot Lock

Default version status: unaffected

  • 0 to < 7.7affected

SwitchBot SwitchBot Lock Pro

Default version status: unaffected

  • 0 to < 3.7affected

SwitchBot SwitchBot Lock Wifi

Default version status: unaffected

  • 0 to < 15.21affected

SwitchBot SwitchBot Lock Ultra

Default version status: unaffected

  • 0 to < 2.8affected

SwitchBot SwitchBot Lock Lite

Default version status: unaffected

  • 0 to < 7.7affected

SwitchBot SwitchBot Keypad

Default version status: unaffected

  • 0 to < 2.9affected

SwitchBot SwitchBot Keypad Touch

Default version status: unaffected

  • 0 to < 2.9affected

SwitchBot SwitchBot Keypad Vision

Default version status: unaffected

  • 0 to < 2.5affected

SwitchBot SwitchBot Keypad Vision Pro

Default version status: unaffected

  • 0 to < 1.0affected

SwitchBot SwitchBot App

Default version status: unaffected

  • 0 to < 9.18affected

References