Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-2756

OmniPEMF NeoRhythm BLE missing authentication

CVSS 4.0 2.3 LOWCVSS 3.1 5.0 MEDIUMCVSS 3.0 5.0 MEDIUMCVSS 2.0 4.3 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-2756

Published

A security vulnerability has been detected in OmniPEMF NeoRhythm up to 20260308. This affects an unknown function of the component BLE Interface. Such manipulation leads to missing authentication. The attack can only be initiated within the local network. This attack is characterized by high complexity. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-2756

Published

NeoRhythm

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "OmniPEMF",
                    "product": "NeoRhythm",
                    "versions": [
                        {
                            "version": "20260308",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:omnipemf:neorhythm:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "BLE Interface"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON