[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBtn6AuysUDzEKVyH0ebZte-POgsdKL7ZLzfKkya_5ZE":3,"g5a-risk:CVE-2020-26556":125},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":25,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":54,"references":55,"referencesCount":54,"weaknesses":70,"weaknessesCount":79,"isActivelyExploited":80,"cisaInfo":25,"otxData":25,"relatedBlogPosts":81,"seoMetadata":82,"configurations":107,"relatedVendorCves":121,"notableEvents":122},"CVE-2020-26556","What is CVE-2020-26556?","Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times out, to complete authentication by leveraging Malleable Commitment.","Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficientl...","2021-05-24T18:15:07.873","2022-04-29T14:10:50.397",7.5,"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","ADJACENT_NETWORK","HIGH","NONE","UNCHANGED",null,1.6,5.9,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":35,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":33,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:A\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","MEDIUM","PARTIAL",2.9,"LOW",5.5,0.00907,[38,38,38,38,38,38,38],"High",[42,47,51],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"bluetooth","bluetooth_core_specification","*","cpe:2.3:a:bluetooth:bluetooth_core_specification:*:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"mesh_profile","1.0.0","cpe:2.3:a:bluetooth:mesh_profile:1.0.0:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":52,"criteria":53,"vulnerable":4},"1.0.1","cpe:2.3:a:bluetooth:mesh_profile:1.0.1:*:*:*:*:*:*:*",3,[56,62,67],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fkb.cert.org\u002Fvuls\u002Fid\u002F799380","Cert",[60,61],"Third Party Advisory","US Government Resource",{"url":63,"source":64,"tags":65},"https:\u002F\u002Fwww.bluetooth.com\u002Flearn-about-bluetooth\u002Fkey-attributes\u002Fbluetooth-security\u002Freporting-security\u002F","Bluetooth",[66],"Vendor Advisory",{"url":68,"source":58,"tags":69},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F799380",[60,61],[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-307","Improper Restriction of Excessive Authentication Attempts","The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.","","Draft","Base","Simple",1,false,[],{"title":83,"metaDescription":84,"keywords":85,"canonicalUrl":86,"structuredData":87},"What is CVE-2020-26556? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-26556, a high severity cyber security vulnerability from 2021. Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0...","CVE-2020-26556, CVE-2020-26556 vulnerability, CVE-2020-26556 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, bluetooth security, bluetooth_core_specification vulnerability, mesh_profile vulnerability","\u002Fwhat-is\u002Fcve-2020-26556",{"@context":88,"@type":89,"headline":83,"description":84,"datePublished":10,"dateModified":11,"author":90,"publisher":94,"about":98,"mainEntityOfPage":102,"articleSection":105,"keywords":106},"https:\u002F\u002Fschema.org","TechArticle",{"@type":91,"name":92,"url":93},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":91,"name":92,"url":93,"logo":95},{"@type":96,"url":97},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":99,"name":6,"description":100,"additionalType":101},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":103,"@id":104},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-26556","Cybersecurity","CVE-2020-26556, CVE-2020-26556 vulnerability, CVE-2020-26556 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[108],{"Operator":25,"Negate":25,"Nodes":109},[110],{"Operator":111,"Negate":25,"CPEMatch":112},"OR",[113,117,119],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":114,"VersionStartExcluding":25,"VersionStartIncluding":115,"VersionEndExcluding":25,"VersionEndIncluding":116},"F5F407B4-DC1C-4026-90D3-11C6B80EC905","1.0b","5.2",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":118,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"851ACDD0-CD31-4CEC-AD23-C57C68178352",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":120,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"C4959D86-09FD-4C6A-AA52-7667FA9EC4BD",[],[],{"lastModified":11,"cacheTime":124,"version":31},1792440952119,{"score":126,"band":127,"action":128,"scoredAt":129},46,"Medium","Plan remediation","2026-10-16T06:51:10.438153+00:00"]