https://cve.radiocsirt.org/rss/recent/csaf_harmaninternational/10 Most recent entries from csaf_harmaninternational 2026-10-02T07:10:28.432423+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/hbsa-2025-0003 HBSA-2025-0003 — JBL: DoS vulnerability in Flip 4 2026-02-18T07:00:00+00:00

The Bluetooth Classic implementation on JBL Flip 4 devices with firmware version prior to 4.1.0 does not properly handle malformed LMP messages and causes the entire device to crash. Any attacker in radio range can exploit this vulnerability.

 2026-02-18T07:00:00+00:00 https://cve.radiocsirt.org/vuln/hbsa-2025-0002 HBSA-2025-0002 — BLE ICM Vulnerability in JBL Headphones 2025-12-10T07:00:00+00:00

The BLE controller in certain consumer products fails to properly validate the channel map field in connection requests, enabling attackers within radio range to cause a denial of service through a specially crafted packet.

 2025-12-10T07:00:00+00:00 https://cve.radiocsirt.org/vuln/hbsa-2025-0001 HBSA-2025-0001 — BLE GATT Service Vulnerability in JBL Headphones 2025-12-10T07:00:00+00:00

Due to improper BLE security configurations and lack of authentication on the GATT server of JBL LIVE PRO 2 TWS and JBL TUNE FLEX Headphones, unauthenticated users can read and write device control commands through the mobile app service.

 2025-12-10T07:00:00+00:00