What is CVE-2026-89034?

CVE-2026-89034 is a medium-severity vulnerability in Tch Qring, classified under Missing Authentication for Critical Function. CVSS score: 6.5/10. Published 2026-09-16.

How severe is CVE-2026-89034?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Tch Qring

CVE-2026-89034

TCH QRing smart ring model R20_B006 running firmware RT09R20_1.00.00_250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service which enforces no client authentication or command authorization. Attackers within Bluetooth Low Energy range can connect directly to the ring, bypassing the official application and cloud authentication, to read battery levels, activate live heart rate monitoring, and retrieve stored historical heart rate and blood oxygen records.

Vulnerability class: Broken Authentication

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Tch Qring — versions RT09R20_1.00.00_250318

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

disclosure@vulncheck.com (technical-description)
disclosure@vulncheck.com (exploit)

Frequently asked questions

What is CVE-2026-89034?: CVE-2026-89034 is a medium-severity vulnerability in Tch Qring, classified under Missing Authentication for Critical Function. CVSS score: 6.5/10. Published 2026-09-16.
How severe is CVE-2026-89034?: Medium severity. CVSS v3 base score is 6.5 out of 10.