CVE-2025-71410

Medium5.3Published on August 7, 2026

Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio frequency.

CVSS score5.3 / 10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness type (CWE)CWE-770

Vulnerabilities

Vulnerabilities in CPDLC Communications: Fake Messages and Radio-Induced Disconnections

Learn about CPDLC vulnerabilities in ATN-B1 systems, including fake messages and disconnections from CISA advisory ICSA-26-219-01. CVE details included.

Aug 7, 202621:072 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Vulnerabilities in CPDLC Communications: Fake Messages and Radio-Induced Disconnections