This vulnerability involves an authentication bypass in the Bluetooth LE legacy pairing process of silabs.com WiseConnect products, specifically in RS9116W and SiWx917 devices. The flaw allows an attacker to bypass the passkey entry step by manipulating the temporary key value, undermining the intended security of the pairing process. The issue is tracked as CVE-2026-65935 and is classified under CWE-305 (Authentication Bypass). The CVSS v4.0 base score is 7.6, indicating high severity, with attack vector being adjacent network, low attack complexity, and no privileges or user interaction required. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability allows an attacker to bypass the Bluetooth LE legacy pairing authentication, potentially enabling unauthorized device pairing and access. This compromises the security of the affected devices by allowing unauthorized connections without proper authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting exposure of affected devices to untrusted networks and monitor for updates from silabs.com regarding patches or mitigations.