HIGH
Sciener
CVE published 2026-10-26
CVE-2026-112345
PatchSiren debrief for CVE-2026-112345: TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure. The TTLock Android application and associated smart-lock firmware contain a hardcoded static AES key vulnerability, allowing attackers within Bluetooth range to decrypt per-pairing session keys and perform unauthorized actions. Defenders should assess exposure, prioritize verification, and remediati [truncated]