CVE-2020-26555: Bluetooth Core Specification

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BD_ADDR of the peer device to complete pairing without knowledge of the PIN.

Affected products

• Bluetooth Bluetooth Core Specification: from 1.1b, up to and including 5.2
• Fedoraproject Fedora: version 34 only
• Intel Ac 3165 Firmware: affected versions not specified
• Intel Ac 3168 Firmware: affected versions not specified
• Intel Ac 7265 Firmware: affected versions not specified
• Intel Ac 8260 Firmware: affected versions not specified
• Intel Ac 8265 Firmware: affected versions not specified
• Intel Ac 9260 Firmware: affected versions not specified
• Intel Ac 9461 Firmware: affected versions not specified
• Intel Ac 9462 Firmware: affected versions not specified
• Intel Ac 9560 Firmware: affected versions not specified
• Intel AX200 Firmware: affected versions not specified
• Intel AX201 Firmware: affected versions not specified
• Intel AX210 Firmware: affected versions not specified
• Intel Killer Ac 1550 Firmware: affected versions not specified
• Intel Killer Wi-Fi 6 AX1650 Firmware: affected versions not specified
• Intel Killer Wi-Fi 6e AX1675 Firmware: affected versions not specified

Published 2021-05-24. Last modified 2026-06-17.