THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-89034 (MEDIUM 6.5) — TCH QRing smart ring model R20_B006 running firmware RT09R20_1.00.00_250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed N

[NVD] CVE-2026-89034 (MEDIUM 6.5) — TCH QRing smart ring model R20_B006 running firmware RT09R20_1.00.00_250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed N

mednvdPublished 2026-09-16

CVE-2026-89034 CVSS: 6.5 MEDIUM Published: 2026-09-16T22:18:27.613

TCH QRing smart ring model R20_B006 running firmware RT09R20_1.00.00_250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service which enforces no client authenti

Indicators of compromise

CVE-2026-89034cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-89034