Is CVE-2026-2756 actively exploited?

No active exploitation of CVE-2026-2756 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-2756 be exploited remotely?

Partially. CVE-2026-2756 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-2756?

CVE-2026-2756 has a CVSS score of 5.0 (MEDIUM).

HOME VULNERABILITIESCVE-2026-2756

MEDIUM

CVE-2026-2756

CWE-287Published: March 21, 2026· Updated: Mar 23, 2026

5.0

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:8.5th

Official Description

A security vulnerability has been detected in OmniPEMF NeoRhythm up to 20260308. This affects an unknown function of the component BLE Interface. Such manipulation leads to missing authentication. The attack can only be initiated within the local network. This attack is characterized by high complexity. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

NVD Source

Technical Analysis

CVE-2026-2756 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

From a weakness classification perspective (CWE-287): Authentication bypass vulnerabilities allow attackers to access protected resources without valid credentials.