CVE-2026-2756 is a vulnerability in the BLE Interface component of OmniPEMF NeoRhythm versions up to 20260308. The vulnerability results in missing authentication, potentially allowing unauthorized actions. Exploitation requires the attacker to be within the local network, involves high complexity, and is considered difficult to exploit. The vendor was contacted but did not provide any response or remediation information.

The vulnerability could lead to unauthorized access or actions due to missing authentication in the BLE Interface. However, the attack surface is limited to local network access, and the complexity and difficulty of exploitation reduce the likelihood of successful attacks. Confidentiality, integrity, and availability impacts are rated low according to the CVSS score.

No official fix or patch is currently available, and the vendor has not responded to disclosure attempts. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the local network attack vector and high complexity, restricting physical or network access to trusted users may reduce risk until a fix is available.