Vulnerabilities

CVSS

7.1 High

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L

Risk score

56.8

Published

2026-08-07

Status

Published

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency.

Weaknesses

CWE-306

Coverage 1

threat-intel

CPDLC over ATN-B1 Vulnerabilities

A CISA advisory highlights vulnerabilities in the CPDLC over ATN-B1 protocol, which relies on legacy, unauthenticated radio frequency links. These vulnerabilities allow for message injection, denial-of-service conditions…

CISA Advisories · Aug 7, 2026 High

CVE-2025-71409CVE-2025-71410CVE-2025-71411vulnerabilitythreat-intelsupply-chain

All articles mentioning it

Advisories and references

• cisa.gov/news-events/ics-advisories/icsa-26-219-01