CVE-2025-71412

High7.1Published on August 7, 2026

Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency.

CVSS score7.1 / 10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L

Weakness type (CWE)CWE-754

Vulnerabilities

Vulnerabilities in CPDLC Communications: Fake Messages and Radio-Induced Disconnections

Learn about CPDLC vulnerabilities in ATN-B1 systems, including fake messages and disconnections from CISA advisory ICSA-26-219-01. CVE details included.

Aug 7, 202621:072 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Vulnerabilities in CPDLC Communications: Fake Messages and Radio-Induced Disconnections