My personnal CVEs Pokedex and my Preferred Way to Spend Time
LIST OF Reported CVE
CVE-2026-XXXX
Insecure Cryptographic Key-Sharing Protocol in TTLock Bluetooth Pairing
CVE-2026-XXXX
CVSS 8.1
TTLock
The TTLock Bluetooth pairing protocol uses a hardcoded static AES key (defaultKey) to encrypt the transmission of the session key (aesKeyStr), allowing an attacker within Bluetooth range to recover it and forge legitimate requests to the lock.
