https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T03:35:59.448691+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-52435 CVE-2025-52435 — Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller 2026-10-13T03:35:59.465284+00:00

Affected: Apache Software Foundation Apache Mynewt NimBLE

J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE.

Improper handling of Pause Encryption procedure on Link Layer results in a previously encrypted connection being left in un-encrypted state allowing an eavesdropper to observe the remainder of the exchange. This issue affects Apache NimBLE: through <= 1.8.0.

Users are recommended to upgrade to version 1.9.0, which fixes the issue.