What’s Vulnerable › Vulnerabilities

CVE-2026-52866: Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT Missing Authorization

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-19 · updated 2026-10-26
• Weakness: CWE-862

Description

An attacker within BLE communication range can monopolize the device's only available BLE connection slot, preventing legitimate users or applications from establishing a connection.

Affected products

• Apollo Pharmacy Blood Glucose Monitoring System (Model No. APG-01 BT): 0x0110_v1.1.0

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-169-01.json
• https://www.apollopharmacy.in/contact-us
• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-169-01
• https://www.cisa.gov/news-events/news/understanding-bluetooth-technology

Get alerted when CVE-2026-52866 or the next vulnerability affects your stack