CVE-2018-10910: Bluez

Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.

Affected products

• Bluez Bluez: before 5.51 (fixed in 5.51)
• Canonical Ubuntu Linux: version 18.04 only

Published 2019-01-28. Last modified 2026-06-17.