Is CVE-2026-28526 actively exploited?

No active exploitation of CVE-2026-28526 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-28526 be exploited remotely?

Partially. CVE-2026-28526 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-28526?

CVE-2026-28526 has a CVSS score of 5.7 (MEDIUM).

HOME VULNERABILITIESCVE-2026-28526

MEDIUM

CVE-2026-28526

CWE-125Published: March 30, 2026· Updated: Apr 3, 2026

5.7

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:3.1th

Official Description

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_ATTRIBUTES and LIST_PLAYER_APPLICATION_SETTING_VALUES handlers that allows attackers to read beyond buffer boundaries. A nearby attacker with a paired Bluetooth Classic connection can send a specially crafted VENDOR_DEPENDENT response with an attacker-controlled count value to trigger an out-of-bounds read from the L2CAP receive buffer, potentially causing a crash on resource-constrained devices.

NVD Source

Technical Analysis

CVE-2026-28526 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 5.7.