PT-2026-6786 · Flycatcher Toys · Smart Pixelator 2.0

Davidrochester · Publicado 2026-02-06 · Atualizado 2026-03-05 · CVE-2026-2065

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flycatcher Toys smART Pixelator 2.0

Description A security flaw exists in Flycatcher Toys smART Pixelator 2.0, specifically within the Bluetooth Low Energy Interface component. A manipulation of this component results in missing authentication. This attack can only be performed from the local network. The exploit has been publicly released and may be used for malicious purposes. The vendor was informed of this issue but did not provide a response.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Improper Authentication

Missing Authorization

Enumeração de Fraquezas

CWE-306

CWE-287

CWE-862

Identificadores relacionados

CVE-2026-2065

Produtos afetados

Smart Pixelator 2.0

Referências · 9

• 🔥 https://github.com/davidrxchester/smart-pixelator-upload/blob/main/poc.py · Exploit
• https://t.me/CVEtracker/43968 · Publicação no Telegram
• https://vuldb.com/?submit.745129 · Nota
• https://twitter.com/CVEnew/status/2019876698897150244 · Publicação no Twitter
• https://github.com/davidrxchester/smart-pixelator-upload · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2065 · Nota de Segurança
• https://vuldb.com/?ctiid.344632 · Nota
• https://vuldb.com/?id.344632 · Nota
• https://t.me/cveNotify/154394 · Publicação no Telegram