CVE-2026-67560CWE-121

CVE-2026-67560

High · published August 28, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
25.5
In the wild
Unconfirmed
What it is

Bendix EC80 Brake ECU

is vulnerable to a stack-based buffer overflow, which may allow an

attacker to crash the ECU. A crafted payload can then be used to

remotely execute arbitrary code or inject arbitrary CAN bus traffic.

This could cause the loss of the ABS function, steering assist,

speedometer, and shifting.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
7.7 · CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00334 · 25.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-08-28T04:18Z
References (2)
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-05.json · [email protected]https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-05 · [email protected]
EPSS history
Timeline
  • 27 AUG 20:54Z
    Stack-based Buffer Overflow in Bendix EC80 Brake ECU
    cvelistv5