Threat database

CVE-2026-8374 is a high-severity vulnerability in the SwitchBot Lock Series that arises from misuse and misconfiguration of Bluetooth communication. This flaw involves the generation of weak initialization vectors (IVs) in the communication protocol, allowing attackers to bypass the electronic lock and access controls. The vulnerability affects multiple versions of the product up to version 9.2.6. No official patch or remediation details are provided in the available data.

Smart Video Doorbell firmware versions prior to 2.01.078 contain an active debug code vulnerability that allows an attacker to connect via Telnet and gain access to the device.

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs.