Vulnerabilities

CVSS

5.3 Medium

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Risk score

42.4

Published

2026-08-07

Status

Received

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency.

Weaknesses

CWE-770

Coverage 1

threat-intel

CPDLC over ATN-B1 Vulnerabilities

A CISA advisory highlights vulnerabilities in the CPDLC over ATN-B1 protocol, which relies on legacy, unauthenticated radio frequency links. These vulnerabilities allow for message injection, denial-of-service conditions…

CISA Advisories · Aug 7, 2026 High

CVE-2025-71409CVE-2025-71410CVE-2025-71411vulnerabilitythreat-intelsupply-chain

All articles mentioning it

Advisories and references

• cisa.gov/news-events/ics-advisories/icsa-26-219-01