CVE-2020-26558

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.

• CWE-287

• https://kb.cert.org/vuls/id/799380Third Party Advisory, US Government Resource
• https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/06/msg00022.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/
• https://security.gentoo.org/glsa/202209-16Third Party Advisory
• https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/Vendor Advisory
• https://www.debian.org/security/2021/dsa-4951Third Party Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.htmlThird Party Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.htmlThird Party Advisory
• https://kb.cert.org/vuls/id/799380Third Party Advisory, US Government Resource
• https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/06/msg00022.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/
• https://security.gentoo.org/glsa/202209-16Third Party Advisory
• https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/Vendor Advisory
• https://www.debian.org/security/2021/dsa-4951Third Party Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.htmlThird Party Advisory
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.htmlThird Party Advisory
• https://www.kb.cert.org/vuls/id/799380

Published

May 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26552An issue was discovered in Aviatrix Controller before R6.0.2…7.5
• CVE-2020-26553An issue was discovered in Aviatrix Controller before R6.0.2…9.8
• CVE-2020-26554REDDOXX MailDepot 2033 (aka 2.3.3022) allows XSS via an inco…6.1
• CVE-2020-26555Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core S…5.4
• CVE-2020-26556Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.…7.5
• CVE-2020-26557Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.…7.5
• CVE-2020-26559Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.…8.8
• CVE-2020-2656Vulnerability in the Oracle Solaris product of Oracle System…4.4
• CVE-2020-26560Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.…8.1
• CVE-2020-26561Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have …8.8
• CVE-2020-26563ObjectPlanet Opinio before 7.14 allows reflected XSS via the…6.1
• CVE-2020-26564ObjectPlanet Opinio before 7.15 allows XXE attacks via three…6.5