CVE-2026-2756Disclosure

LOWCVSS 2.3 · LOW

Exploitation ongoing with high activity in latest observed window (2 mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A security vulnerability has been detected in OmniPEMF NeoRhythm up to 20260308. This affects an unknown function of the component BLE Interface. Such manipulation leads to missing authentication. The attack can only be initiated within the local network. This attack is characterized by high complexity. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

3.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-287CWE-306

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-03-22)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-21: 1Mentions · 2026-03-22: 2Active Exploitation · 2026-03-22: 1Technical Details · 2026-03-21: 103-2103-22
Signal classification2 categories
Disclosure
266.7%
Active Exploitation
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-211
Disclosure1
2026-03-222
Active Exploitation1Disclosure1
Full discourse3 posts
  • VulDB 🛡@vuldb
    Active Exploitation

    Attention, elevated activities detected targeting OmniPEMF NeoRhythm (CVE-2026-2756) https://vuldb.com/?ctiid.352383

    Post summary

    An alert indicates recently detected elevated activity targeting systems vulnerable to CVE-2026-2756, suggesting ongoing exploitation in the wild.

    0000059
    2.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-2756 A security vulnerability has been detected in OmniPEMF NeoRhythm up to 20260308. This affects an unknown function of the component BLE Interface. Such manipulation lead… https://www.cve.org/CVERecord?id=CVE-2026-2756

    Post summary

    The post describes CVE-2026-2756 as a security vulnerability detected in OmniPEMF NeoRhythm’s BLE Interface, but provides no further technical or exploitation details, only a link to the CVE record.

    0000062
    56.8K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-2756 - OmniPEMF NeoRhythm BLE missing authentication Intel Report: https://ift.tt/EFk27Au

    Post summary

    The tweet announces the CVE-2026-2756 vulnerability, noting a missing authentication issue in OmniPEMF NeoRhythm BLE, without detailing PoC, exploits, or mitigation.

    0000033
    334 followersView on X

Explore more