CVE-2026-86520
HighCVSS 7.5Summary
Bransys ELD is shipped with hardcoded MQTT credentials, which grant read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker.
Risk Assessment
Anyone knowing the embedded credentials can read real-time data from many Bransys ELD devices, causing a serious confidentiality breach of fleet data.
Recommendation
Replace the hardcoded MQTT credentials with per-device unique credentials and implement key rotation and broker-side access restrictions.
Other vulnerabilities in Bransys ELD
See all- CVE-2026-86689Medium
Bransys ELD is shipped with hardcoded MQTT credentials. These credentials grant read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker.
- CVE-2026-77960Medium
Bransys ELD is shipped with hardcoded MQTT credentials. These credentials grant read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker.
Original NVD description (English source)
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker.