关键漏洞信息 CVE编号: CVE-2026-0842 风险等级: critical 漏洞概述 受影响产品: FLYCATCHER Toys smART Sketcher up to 2.0 漏洞类型: Missing authentication 组件: Bluetooth Low Energy Interface 漏洞细节 漏洞描述: 由于蓝牙低功耗接口的未知代码中缺少认证功能，导致出现未认证漏洞问题。 受影响对象: 该漏洞影响的组件数据通信需要有效的用户身份或消耗大量资源。 安全影响: confidentiality, integrity, availability 开发者咨询 修复建议: 目前没有对策信息，建议替换受影响对象与替代产品。 危害分级: - CVSS v4: meta base score: 6.3 meta temp score: 6.0 - base score: 6.3 temp score: 5.7 - Vector: directly related to the Bluetooth Low Energy Interface. - Reliability: confirmation uncertainty 利用信息 可用性: online 访问类型: public 状态: proof-of-concept available 编程语言: code included 依赖下载: download available EPSS Score: high 市场报价: trend analysis available 0-Day: not currently affecting 威胁情报 兴趣: minimal interest globally 活跃者: no substantial activity noted APT组织: not associated with known APTs 计时 发现日期: 2026.01.10 (advisory disclosed) 最后更新: 2023.12.01 (VulDB entry last update) 来源 公告源: a gist hosted on github.com 相关CVEs: CVE-2026-0842 认可: VulDB Knowledge Base Servers partially sponsor this research.