CVE-2026-18411

High8.1Published on August 5, 2026

The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth range can leverage this weakness to issue unauthorized commands to the vehicle, potentially allowing unauthorized access to vehicle functions, including door unlocking and engine immobilization.

CVSS score8.1 / 10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness type (CWE)CWE-321

Vulnerabilities

Acrisure KARR BT and DR-100 Bluetooth Flaw Enables Unauthorized Vehicle Commands

On August 4, 2026, CISA published an advisory on CVE-2026-18411 , a vulnerability affecting Acrisure KARR BT and DR-100 products. The issue stems from the

Aug 5, 202601:091 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Acrisure KARR BT and DR-100 Bluetooth Flaw Enables Unauthorized Vehicle Commands