What’s Vulnerable › Vulnerabilities

CVE-2026-109570: Fire-Boltt BSW013 through V0.0.8 Unauthenticated BLE Notification Injection

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-12 · updated 2026-10-16
• Weakness: CWE-306

Description

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC checksum to vibrate the watch and display spoofed alert text for phishing.

Affected products

• Fire-Boltt BSW013: through V0.0.8

References

• https://github.com/Pratham-16/fireboltt-Bsw013-BLE-vuln
• https://www.vulncheck.com/advisories/fire-boltt-bsw013-through-v0-0.8-unauthenticated-ble-notification-injection
• https://github.com/Pratham-16/fireboltt-Bsw013-BLE-vuln

Get alerted when CVE-2026-109570 or the next vulnerability affects your stack