{"uuid": "8c1ebe50-dedc-4938-98d7-efb7fcd643d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20701", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mv5abrwufy2o", "content": "Skullcandy Dime 3 earbuds (CVE-2025-20701) accept Bluetooth pairing from any nearby device with no PIN or prompt, letting an attacker hijack audio and pull live mic audio. Skullcandy fixed it in firmware 1.0.0.30, but no update path exists for existing units, so vulnerable buds stay vulnerable.", "creation_timestamp": "2026-09-10T04:42:34.576777Z"}