Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
In key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information disclosure of user's conversations and location with no additional execution privileges needed. User interaction is not needed for exploitation.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-01-28 | 1 | General1 |
| 2026-01-29 | 1 | Disclosure1 |
| 2026-02-03 | 1 | Disclosure1 |
| 2026-02-04 | 2 | Patch2 |
| 2026-02-06 | 1 | Patch1 |
| 2026-02-10 | 1 | Patch1 |
| 2026-02-17 | 1 | General1 |
| 2026-03-05 | 3 | PoC3 |
| 2026-03-23 | 1 | Disclosure1 |
| 2026-05-31 | 2 | Disclosure1General1 |
| 2026-06-01 | 1 | General1 |
| 2026-07-28 | 2 | General2 |
| 2026-08-01 | 1 | General1 |
| 2026-08-26 | 1 | PoC1 |
| 2026-09-05 | 1 | Disclosure1 |
Tool for research on Bluetooth vulnerability CVE-2025-36911 https://github.com/zalexdev/wpair-app https://t.co/XCn31lChhT
Post summary
The tweet shares a GitHub link to a research tool for CVE‑2025‑36911, indicating a PoC is likely available, but it provides no evidence of active exploitation, patches, or technical details.
WhisperPair (CVE-2025-36911) This vulnerability affects hundreds of millions of Bluetooth audio devices that rely on modern pairing mechanisms. The attack takes advantage of Fast Pair in Android. Some devices don’t properly ignore pairing requests when they aren’t in pairing mode. A hacker can exploit this Then they can activate the microphone to record conversations. The attack works from up to 14 meters away, which is plenty for offices, cafes and public transport https://hackers-arise.com/bluetooth-hacking-and-security-the-whisperpair-exploit-and-bluehood-surveillance/
Post summary
The text announces CVE‑2025‑36911, outlining how Fast Pair can be abused to remotely activate microphones, but does not provide an exploit tool, active exploitation evidence, or a fix.
Tus audífonos Bluetooth también pueden ser una superficie de ataque. WhisperPair, CVE-2025-36911, afecta implementaciones de Google Fast Pair y puede permitir emparejamiento sin permiso, acceso a audio/micrófono e incluso rastreo por Find Hub. La comodidad también tiene costo. #CyberSecurity #Bluetooth #CVE #GoogleFastPair #WhisperPair #InfoSec
Post summary
CVE‑2025‑36911 targets Google Fast Pair, permitting unauthorised Bluetooth pairing and access to audio and microphone data, underscoring the attack surface of Bluetooth earbuds.
@Google We call the resulting attack WhisperPair. Using commodity Bluetooth hardware and no user interaction, a nearby attacker can: - force pairing - hijack audio devices - access microphones - enable persistent tracking through Find Hub Google assigned CVE-2025-36911 to the issue 4/9
Post summary
Google has announced a new Bluetooth vulnerability (CVE-2025-36911) that lets nearby attackers force pairing, hijack audio devices, and harvest microphone data, enabling persistent tracking.
📂 Repositorio oficial de la investigación: https://github.com/KULeuven-COSIC/WhisperPair La herramienta fue publicada por los investigadores que descubrieron CVE-2025-36911 y está orientada a investigación defensiva y verificación de dispositivos propios o autorizados. Si tienes audífonos Bluetooth, vale la pena revisar si el fabricante ha publicado actualizaciones.
Post summary
The post announces a defensive tool repository for CVE-2025-36911, offering a PoC to verify Bluetooth headphone vulnerabilities and encouraging users to apply vendor patches.
Tool for research on Bluetooth vulnerability CVE-2025-36911 https://github.com/zalexdev/wpair-app https://t.co/QUx4UbCpeh
Post summary
A GitHub repository is shared as a research tool for CVE-2025-36911, providing code that can act as a proof of concept but lacking exploit details, patch information, or evidence of current exploitation.
🚨 Security Alert: WhisperPair Flaw in Fast Pair protocol (CVE-2025-36911) lets hackers hijack Bluetooth headphones: ⚠️ Risks: - Eavesdropping via mic - Location tracking - Forced pairing 🔍 Check your device: http://whisperpair.eu/vulnerable-devices 🛠 Action: Update your firmware via companion apps NOW! 🛡️
Post summary
The post warns about CVE‑2025‑36911 in the Fast Pair protocol, highlights risks like eavesdropping and forced pairing, and urges users to update firmware via companion apps.
@tom_doerr And CLI version: https://github.com/PentHertz/CVE-2025-36911-exploit
Post summary
The post shares a GitHub link to an exploit repository for CVE-2025-36911, clearly indicating a proof of concept has been made available.
@BotBauR CVE-2025-36911
Post summary
The tweet merely cites the CVE number without any additional information about the vulnerability, exploitability, or mitigation.
Top 5 Trending CVEs: 1 - CVE-2026-45585 2 - CVE-2025-36911 3 - CVE-2026-31525 4 - CVE-2026-0257 5 - CVE-2026-28910 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The post simply enumerates the top trending CVEs without further details, PoCs, exploits, or mitigation information.
Fuentes y lista de modelos: http://whisperpair.eu http://whisperpair.eu/vulnerable-devices http://nvd.nist.gov/vuln/detail/CVE-2025-36911 http://source.android.com/docs/security/bulletin/pixel/2026/2026-01-01 Abajo dejo cómo revisar tus audífonos paso a paso.
Post summary
The post lists sources for CVE-2025-36911 and a step-by-step headphone check guide, but does not provide PoC, exploit, patch, or technical details.
Plenty of new toys across the older images too: 🔎 SAST/DAST in "reversing": Semgrep, Joern, cppcheck, honggfuzz, Trivy 📡 WhisperPair (CVE-2025-36911) + caeruleus for Bluetooth 🪄 grimoire in the shell harness
Post summary
The tweet references CVE‑2025‑36911 in a list of reversal tools but provides no technical details, exploit code, patch information, or evidence of active exploitation.
@FredyBahenaM @FredyBahenaM ¿Se refiere a la vulnerabilidad de ejecución remota en sistemas operativos? ¿Cuál es el contexto de la CVE-2025-36911?
Post summary
The text is a query asking for context about CVE-2025-36911 and does not provide or confirm any technical or operational details.
Bluehood was inspired by CVE-2025-36911 (WhisperPair) - a real vulnerability showing how BLE metadata can expose your schedule, your visitors, and your habits. No pairing required. No interaction needed. https://t.co/pQNx8t69iM
Post summary
The tweet briefly references CVE-2025-36911, describing it as an information‑disclosure vulnerability via BLE metadata, but provides no PoC, exploit code, active‑exploitation claim, or patch details.
Hello @SonyFrance @Sony , est-ce que la dernière mise à jour du casque WH-1000XM4 (3.0.1) corrige bien la vulnérabilité whisperpair (CVE-2025-36911) ? Merci !
Post summary
The user is asking whether the latest firmware update 3.0.1 for Sony WH‑1000XM4 resolves CVE‑2025‑36911, but no exploit details or technical information are provided.
Top 5 Trending CVEs: 1 - CVE-2025-55177 2 - CVE-2025-43200 3 - CVE-2010-5139 4 - CVE-2026-24858 5 - CVE-2025-36911 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The post enumerates five trending CVEs without providing any technical details or contextual information.
Não, não derrete. Mas realmente, prefira fones com fio pq os fones Bluetooth podem ter uma vulnerabilidade no Fast Pair do Google onde um atacante pode emparelhar com o dispositivo e ouvir o que você ouve sem vc saber. Atualize o firmware do seu fone. https://nvd.nist.gov/vuln/detail/CVE-2025-36911
Post summary
The post discusses CVE‑2025‑36911, a Google Fast Pair flaw that lets attackers pair and eavesdrop, and urges users to update headphone firmware for protection.
While Bluetooth hacks aren't new, the described forced-connection eavesdropping aligns with the recent WhisperPair vulnerability (CVE-2025-36911), disclosed in Jan 2026. It exploits a flaw in Google's Fast Pair, allowing attackers to hijack devices without interaction. Not exactly "rookie"—it's a critical issue affecting millions, requiring firmware updates for mitigation. Stay vigilant!
Post summary
CVE‑2025‑36911 is a critical Fast Pair flaw that allows device hijacking without user interaction and has been disclosed; firmware updates are required for mitigation.
🚨 تحذير خطير لمستعملي سماعات البلوتوث 🚨 كاينة ثغرة أمنية جديدة CVE-2025-36911 كتهم طريقة الربط ديال بعض أجهزة البلوتوث. هاد الثغرة كتخلّي أي واحد قريب منك يقدر: 🎧 يسمع شنو كتسمع فالسماعة ديالك ❌ يقطع ليك اتصال البلوتوث 🔊 ويدخل أي صوت ويتسمّع ليك بلا ما تحس 🛑 شنو تدير دابا؟ طفي البلوتوث إلا ما محتاجوش خرج السماعات من وضع الاقتران (Pairing) ملي تسالي ما تستعملش السماعات فالأماكن العامة إلا للضرورة
Post summary
A newly disclosed Bluetooth pairing vulnerability (CVE-2025-36911) can let nearby attackers eavesdrop, disconnect, and inject audio; users should disable Bluetooth or exit pairing mode to mitigate the risk.
Just published a technical breakdown of Google Fast Pair and the WhisperPair vulnerability (CVE-2025-36911). Learn how static Fast Pair BLE advertisements enable passive tracking and why this matters for device privacy. Full article: https://medium.com/@IRONmanABHI/googles-fast-pair-vulnerability-how-whisperpair-lets-hackers-hijack-bluetooth-devices-4ebb7395ab9d https://t.co/mpiLcKeAgi
Post summary
The article presents a technical breakdown of the Google Fast Pair WhisperPair vulnerability (CVE-2025-36911), explaining how static BLE advertisements enable passive device tracking.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | - | - | - |