Vulnerabilities

CVSS

5.4 Medium

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Risk score

43.2

Published

2026-08-28

Status

Received

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control.

Weaknesses

CWE-798

Coverage 1

vulnerability

Bendix EC80 Brake ECU

A critical vulnerability exists in Bendix EC80 Brake ECU firmware, potentially allowing an attacker to disable ABS, steering assist, speedometer, and shifting capabilities, or inject malicious CAN bus traffic. Multiple f…

CISA Advisories · 5d ago Critical

CVE-2026-67560CVE-2026-68967CVE-2026-71396UNCAfirmwarebuffer overflowcan bus

All articles mentioning it

Advisories and references

• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...
• cisa.gov/news-events/ics-advisories/icsa-26-237-05