SwitchBot vulnerabilities
Published CVEs affecting SwitchBot products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-8374
High · 8.5
CWE-1204 Oct 9, 2026
Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication
Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.
CVE-2025-64983
High · 8.0
CWE-489 Nov 26, 2025
Smart Video Doorbell firmware versions prior to 2.01.078 contain an active debug code…
Smart Video Doorbell firmware versions prior to 2.01.078 contain an active debug code vulnerability that allows an attacker to connect via Telnet and gain access to the device.