EUVD-2026-67275

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedomete...

EUVD-2026-67314

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

EUVD-2026-67273

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU...

CVE-2026-67560

Bendix EC80 Brake ECU is affected by a stack-based buffer overflow that may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic, potentially causing loss of ABS, steering assist, speedometer, and shifting. T...

CVE-2026-68967

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write , allowing an attacker on an adjacent network to deliver a payload that establishes an arbitrary write primitive , potentially crashing the ECU . The attack requires no privileges and no user interaction , with low complexity. CVSS 3.1...

CVE-2026-71396

CVE-2026-71396 affects the Bendix EC80 Brake ECU , which embeds hard-coded credentials that an attacker could leverage to disable automatic traction control . The vulnerability is rated MEDIUM (CVSS 3.1: 5.4; CVSS 4.0: 5.3) with an adjacent-network attack vector, low complexity , and no privilege...

doggie_workshop

EvilDoggie कार्यशाला कार सिम्युलेटर परियोजना प्रस्तुति EvilDoggie कार्यशाला कार सिम्युलेटर रिपॉजिटरी में आपका स्वागत है! यह उपकरण Black Hat Arsenal 2025 सत्र में उपयोग किए गए कार CAN बस वातावरण का अनुकरण करता है। Faraday Security द्वारा विकसित, यह सिम्युलेटर एक वाहन में कई इलेक्ट्रॉनिक नियंत्रण...

CANToolz

CANToolz noto anche come YACHT Un Altro Strumento per Hacking Auto CANToolz è un framework per l'analisi di reti e dispositivi CAN. Fornisce molteplici moduli che possono essere concatenati utilizzando il sistema pipe di CANToolz e utilizzati da ricercatori di sicurezza, tester di sicurezza...

CVE-2026-21014-CAN-Bus-Frame-Replay-Attack-on-Automotive-ECU

CVE-2026-21014 – Attacco di replay dei frame del bus CAN su ECU automotive Codice del programma simulazione Python SocketCAN root@kitploit: canreplaysim.py - Simulates CAN bus replay import time canmessages = def sendcanmsgid, data: printf"CAN msgid:x: data.hex" canmessages.appendmsgid, data def...

CVE-2026-23004-Automotive-UDS-Authentication-Bypass-via-Replay-Attack

CVE-2026-23004 – Bypass dell'autenticazione UDS automobilistico tramite attacco di replay Codice del programma simulatore Python CAN‑UDS root@kitploit: udssim.py - ECU that authenticates with a simple challenge import random, hashlib class ECU: def initself: self.secret = b'longsecretkey' def...

PT-2026-82776

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU...

PT-2026-82779

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control...

PT-2026-82774

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedomete...

gallia

Gallia Gallia è un framework di pentesting estendibile con focus sul dominio automotive. Lo scopo della toolchain è condurre test di penetrazione da una singola ECU fino all'intera vettura. Attualmente, l'attenzione principale è rivolta all'interfaccia UDS. Agendo come interfaccia generica, la...

APsystems ECU-R Firmware - Command Injection

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter. id: CVE-2022-45699 info: name: APsystems ECU-R Firmware - Command Injection author: pussycat0x severity:...

CVE-2026-6890

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-6889

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2026-51379

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-6890

This CVE-2026-6890 entry, as reflected by PT-2026-66670, concerns a default-credentials vulnerability in Advantech ECU-1251D. A remote attacker could gain unauthorised SSH access via the device’s default root account with no password, because credentials are not changed during configuration. The ...

CVE-2026-6890

...