Vulnerability Database

318,638

Total vulnerabilities in the database

CVE-2025-62235

Authentication Bypass by Spoofing vulnerability in Apache NimBLE.

Receiving specially crafted Security Request could lead to removal of original bond and re-bond with impostor. This issue affects Apache NimBLE: through 1.8.0.

Users are recommended to upgrade to version 1.9.0, which fixes the issue.

  • Published: Jan 10, 2026
  • Updated: Jan 13, 2026
  • CVE: CVE-2025-62235
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.1
  • AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CWEs:

Software From Fixed in
apache / nimble - 1.9.0