Breaking: CVE-2025-52435 - Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in Ni...

CVE ID : CVE-2025-52435 Published : Jan. 10, 2026, 10:15 a.m. | 1 hour, 18 minutes ago Description : J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause Encryption procedure on Link Layer results in a previously encrypted connection being left in un-encrypted state allowing an eavesdropper to observe the remainder of the exchange. This issue affects Apache NimBLE: through <=Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor