CVE-2026-11535 describes a security vulnerability in vivo PcSuite where a critical function lacks proper authentication controls. This defect can lead to information leakage within the range of a Bluetooth connection. The vulnerability has a high CVSS 4.0 base score of 8.7, reflecting its severity and ease of exploitation without privileges or user interaction. The vulnerability is not cloud-based, and no known exploits are reported in the wild. No affected versions or patch information are provided, and the vendor has not issued an official remediation level.

The vulnerability allows an attacker within Bluetooth range to potentially access sensitive information due to missing authentication on a critical function in PcSuite. The high CVSS score indicates a significant risk of information disclosure without requiring privileges or user interaction. However, no known exploits have been reported, and the scope is limited to Bluetooth proximity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit Bluetooth exposure and avoid using PcSuite in untrusted environments. Monitor vendor communications for updates on patches or mitigations.