CVE-2026-86689
MediumCVSS 5.9Summary
Bransys ELD is shipped with hardcoded MQTT credentials. These credentials grant read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker.
Risk Assessment
Anyone aware of the hardcoded credentials can read telemetry data from devices of multiple carriers, breaching data confidentiality and potentially enabling further attacks.
Recommendation
Replace the hardcoded MQTT credentials with unique per-device credentials as soon as possible and restrict the MQTT account permissions to the minimum required.
Other vulnerabilities in Bransys ELD
See all- CVE-2026-86520High
Bransys ELD is shipped with hardcoded MQTT credentials, which grant read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker.
- CVE-2026-77960Medium
Bransys ELD is shipped with hardcoded MQTT credentials. These credentials grant read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker.
Original NVD description (English source)
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker.