CVE-2026-67560
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
The Bendix EC80 brake ECU is vulnerable to a stack-based buffer overflow, potentially allowing an attacker to crash the ECU and remotely execute arbitrary code or inject CAN bus traffic. This could lead to loss of ABS, steering assist, speedometer, and shifting.
Risk Assessment
An attack on the brake ECU could cause vehicle malfunction and endanger driver and passenger safety. Remote code execution could lead to full vehicle control.
Recommendation
Apply vendor patches immediately and restrict network access to the ECU. Monitor CAN traffic for anomalous patterns.
Original NVD description (English source)
Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedometer, and shifting.