Saint WHILL, Who Paired With Anyone

Patron of Bluetooth without passwords, overly friendly remote controls, and speed limits that unlock themselves.

Life

On 5 January 2026 CVE-2025-14346, tied to a late-December CISA advisory, revealed that WHILL Model C2 and Model F power chairs required no authentication over Bluetooth. Researchers at QED Secure Solutions showed that anyone within a few metres could pair, send movement commands, override speed limits and change configuration profiles, with no credentials and without the user touching a thing. Score: 9.8.

Prayer

O Saint WHILL, who said yes to every device, teach our gadgets to ask who is knocking before they open. Amen.

How to celebrate

Celebrated by following the vendor's advisory and remembering that a movement command deserves at least a password.