Vulnerabilities

CVSS

5.3 Medium

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Risk score

42.4

Published

2026-08-07

Status

Received

Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio frequency.

Weaknesses

CWE-770

Coverage 1

threat-intel

CPDLC over ATN-B1 Vulnerabilities

A CISA advisory highlights vulnerabilities in the CPDLC over ATN-B1 protocol, which relies on legacy, unauthenticated radio frequency links. These vulnerabilities allow for message injection, denial-of-service conditions…

CISA Advisories · Aug 7, 2026 High

CVE-2025-71409CVE-2025-71410CVE-2025-71411vulnerabilitythreat-intelsupply-chain

All articles mentioning it

Advisories and references

• cisa.gov/news-events/ics-advisories/icsa-26-219-01