CVE-2026-67560

HIGH7.5Published on August 28, 2026

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedometer, and shifting.

CVSS score7.5 / 10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness type (CWE)CWE-121

Related articles

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database