VULNERABILITY INTELLIGENCE

CVE-2026-67560

CVSS score7.7 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-08-28
Last modified2026-09-03
CVSS vectorCVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedometer, and shifting.

Weakness classification

  • CWE-121: Stack-based Buffer Overflow

Primary references