---
id: CVE-2026-2756
title: >-
  A security vulnerability has been detected in OmniPEMF NeoRhythm up to
  20260308
summary: >-
  A security vulnerability has been detected in OmniPEMF NeoRhythm up to
  20260308. This affects an unknown function of the component BLE Interface.
  Such manipulation leads to missing authentication. The attack can only be
  initiated within …
severity: medium
cvss: 5
cvssVector: 'CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-287
  - CWE-306
vendor: OmniPEMF
product: NeoRhythm
affected:
  - NeoRhythm 20260308
published: '2026-03-21'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T22:17:01.787'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-2756'
references:
  - url: 'https://ab3j.radio/NeoRhythm.pdf'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/cve/CVE-2026-2756'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/774937'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/352383'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/352383/cti'
    label: cna@vuldb.com
tags:
  - nvd
  - cve.org
epss: 0.0029
epssPercentile: 0.21791
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-03-23T16:17:47.139567Z'
ingestedAt: '2026-09-16T22:06:50.935Z'
---

## Overview

A security vulnerability has been detected in OmniPEMF NeoRhythm up to 20260308. This affects an unknown function of the component BLE Interface. Such manipulation leads to missing authentication. The attack can only be initiated within the local network. This attack is characterized by high complexity. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.