CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

[NEW] [medium] bluez: Vulnerability allows Execution of Arbitrary Code with Administrator Privileges

mediumCVE-2026-19774
An attacker within Bluetooth range can exploit a vulnerability in bluez to execute arbitrary code with administrator privileges.

CSIRTS triage

vendor: bluezproduct: bluezRemote code executionPrivilege escalation
What
Bluetooth vulnerability in bluez allows arbitrary code execution with administrator privileges.
Who is affected
Systems running bluez within Bluetooth range of attackers.
Urgency
Medium severity; local Bluetooth range attack vector with privilege escalation impact.
Action
Update bluez to the patched version available from the project.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch bluez

Get an email when a new bluez advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity
medium
Published
2026-08-25
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2984

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-19774coverage & exploitation statusNVD · CVE.org

More from CERT-Bund (BSI) Security Advisories