CVE Catalog

CVE-2026-71396

MediumCVSS 5.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.24%

14th percentile - higher than 14% of all known CVEs

Summary

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control.

Risk Assessment

An attacker could gain control over vehicle safety functions, potentially leading to accidents or loss of vehicle control.

Recommendation

Change default credentials to unique, strong passwords and implement secure storage mechanisms.

Original NVD description (English source)

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS