CVE-2025-71409

High7.1Published on August 7, 2026

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency.

CVSS score7.1 / 10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L

Weakness type (CWE)CWE-306

Vulnerabilities

Vulnerabilities in CPDLC Communications: Fake Messages and Radio-Induced Disconnections

Learn about CPDLC vulnerabilities in ATN-B1 systems, including fake messages and disconnections from CISA advisory ICSA-26-219-01. CVE details included.

Aug 7, 202621:072 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Vulnerabilities in CPDLC Communications: Fake Messages and Radio-Induced Disconnections