CVE-2026-4582 | Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N Bluetooth missing authentication

A vulnerability labeled as critical has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this vulnerability is an unknown functionality of the component Bluetooth. Such manipulation leads to missing authentication.

This vulnerability is listed as CVE-2026-4582. The attack must be carried out from within the local network. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.