CVE-2026-86520

High7.5 Published on Sep 18, 2026

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker.

CVSS score7.5 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness type (CWE)CWE-798

Vulnerabilities

Bransys ELD Flaws Could Reveal Live Fleet Telemetry Through Shared Credentials

Three Bransys ELD flaws expose live fleet telemetry via shared MQTT and FTP credentials and unencrypted traffic, risking multi-carrier data leaks.

Sep 17, 202619:31 5 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Bransys ELD Flaws Could Reveal Live Fleet Telemetry Through Shared Credentials