EUVD-2026-67275

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedomete...

EUVD-2026-67314

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

EUVD-2026-67273

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU...

CVE-2026-67560

Bendix EC80 Brake ECU is affected by a stack-based buffer overflow that may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic, potentially causing loss of ABS, steering assist, speedometer, and shifting. T...

CVE-2026-68967

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write , allowing an attacker on an adjacent network to deliver a payload that establishes an arbitrary write primitive , potentially crashing the ECU . The attack requires no privileges and no user interaction , with low complexity. CVSS 3.1...

CVE-2026-71396

CVE-2026-71396 affects the Bendix EC80 Brake ECU , which embeds hard-coded credentials that an attacker could leverage to disable automatic traction control . The vulnerability is rated MEDIUM (CVSS 3.1: 5.4; CVSS 4.0: 5.3) with an adjacent-network attack vector, low complexity , and no privilege...

PT-2026-82776

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU...

PT-2026-82779

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

PT-2026-82774

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedomete...