This vulnerability in silabs.com WiseConnect (CVE-2026-19292) involves an authentication bypass caused by a primary weakness where re-pairing with a legitimate device can occur at a lower security level than before. This reduction in security level makes brute-forcing the Long Term Key (LTK) easier, potentially compromising confidentiality, integrity, and availability. The issue is categorized under CWE-305 (Authentication Bypass). The CVSS v3.1 score is 8.8, indicating high severity, with attack vector being adjacent network, low attack complexity, no privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. Affected versions explicitly include 2.0.0 and 4.0.0. There is no vendor advisory or patch information available at this time.

Successful exploitation allows an attacker to bypass authentication by re-pairing with a legitimate device at a lower security level, making it easier to brute-force the Long Term Key (LTK). This can lead to full compromise of confidentiality, integrity, and availability of the affected device communications.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or mitigation has been published by silabs.com at this time.