Sciener TTLock vulnerabilities

Latest Sciener TTLock CVEs

Newest publication first

1. CVE-2026-112345 TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure

   Published 2026-10-26

   High·CVSS 8.6 EPSS 0.25%

   TTLock Android application before v9.8.260718 and associated smart-lock firmware contain a hardcoded static AES key vulnerability that allows an attacker within Bluetooth range to decrypt the per-pairing session key transmitted during BLE pairing. Attackers can observe the pairin...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.