Vulnerabilities

CVSS

6.5 Medium

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Risk score

52.0

Published

2026-08-28

Status

Received

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU.

Weaknesses

CWE-787

Coverage 1

vulnerability

Bendix EC80 Brake ECU

A critical vulnerability exists in Bendix EC80 Brake ECU firmware, potentially allowing an attacker to disable ABS, steering assist, speedometer, and shifting capabilities, or inject malicious CAN bus traffic. Multiple f…

CISA Advisories · 5d ago Critical

CVE-2026-67560CVE-2026-68967CVE-2026-71396UNCAfirmwarebuffer overflowcan bus

All articles mentioning it

Advisories and references

• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...
• cisa.gov/news-events/ics-advisories/icsa-26-237-05