Is CVE-2026-8676 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-8676 being exploited in the wild.

How severe is CVE-2026-8676?

High severity, with a CVSS score of 8.8, published 26 May 2026.

Which products and versions are affected?

Silicon Labs Bluetooth LE SDK Prior to 9.0.0.0.

Is there a fix for CVE-2026-8676?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-8676 attacked?

It is attacked from the adjacent network, in a software library.

Am I affected by CVE-2026-8676?

Check whether you run Silicon Labs Bluetooth LE SDK at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-8676: Silicon Labs Bluetooth LE authentication bypass via bond spoofing

CVE-2026-8676 · Severity: high · CVSS 8.8 · Published 2026-05-26

A security flaw in Silicon Labs Bluetooth Low Energy (LE) software allows an attacker within physical proximity to downgrade the security of a wireless connection. By spoofing a trusted device and forcing a new pairing process, an attacker can bypass existing security bonds to gain unauthorized access to the communication. This could lead to the theft of sensitive data or unauthorized control over the affected Bluetooth device.

Vendors: Silicon Labs.

Quick answers

Is CVE-2026-8676 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-8676 being exploited in the wild.
How severe is CVE-2026-8676?: High severity, with a CVSS score of 8.8, published 26 May 2026.
Which products and versions are affected?: Silicon Labs Bluetooth LE SDK Prior to 9.0.0.0.
Is there a fix for CVE-2026-8676?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-8676 attacked?: It is attacked from the adjacent network, in a software library.
Am I affected by CVE-2026-8676?: Check whether you run Silicon Labs Bluetooth LE SDK at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability classified as Authentication Bypass by Spoofing (CWE-290) exists in the Silicon Labs Bluetooth LE stack. An attacker within radio range (Adjacent) can trigger a security downgrade by deleting an existing bond and spoofing the identity of a previously bonded device to initiate a new bonding process. This allows the attacker to bypass the protections intended by the original secure bond, potentially leading to full compromise of confidentiality, integrity, and availability of the Bluetooth link. The issue is addressed in Silicon Labs Bluetooth software release 9.0.0.0.

Affected products

Silicon Labs Bluetooth LE SDK Prior to 9.0.0.0

Timeline

2026-05-26: disclosed
2026-05-26: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.