{"id":"CVE-2026-67560","aliases":["EUVD-2026-67275","GHSA-g3jp-7qm3-5x6r"],"status":"published","title":"Stack-based Buffer Overflow in Bendix EC80 Brake ECU","description":"Bendix EC80 Brake ECU\n is vulnerable to a stack-based buffer overflow, which may allow an \nattacker to crash the ECU. A crafted payload can then be used to \nremotely execute arbitrary code or inject arbitrary CAN bus traffic. \nThis could cause the loss of the ABS function, steering assist, \nspeedometer, and shifting.","severity":{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00334,"percentile":0.27092,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121"],"published":"2026-08-27T20:54:20Z","modified":"2026-09-03T18:09:03Z","products":[{"vendor":"bendix","product":"ec80esp 2nd can"},{"vendor":"bendix","product":"ec80esp 4s/4m"},{"vendor":"bendix","product":"ec80esp 6s/6m"},{"vendor":"bendix","product":"ec80esp can gateway"},{"vendor":"bendix","product":"ec80esp plc"},{"vendor":"bendix","product":"ec80esp+ 2nd can"},{"vendor":"bendix","product":"ec80esp+ 6s/6m"},{"vendor":"bendix","product":"ec80esp+ integrated tpms"},{"vendor":"bendix","product":"ec80esp+ j1708"},{"vendor":"bendix","product":"ec80esp+ plc"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-05"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-05.json"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67560"},{"url":"https://github.com/advisories/GHSA-g3jp-7qm3-5x6r"}],"sources":{"cve":[{"id":"CVE-2026-67560","title":"Stack-based Buffer Overflow in Bendix EC80 Brake ECU","description":"Bendix EC80 Brake ECU\n is vulnerable to a stack-based buffer overflow, which may allow an \nattacker to crash the ECU. A crafted payload can then be used to \nremotely execute arbitrary code or inject arbitrary CAN bus traffic. \nThis could cause the loss of the ABS function, steering assist, \nspeedometer, and shifting.","status":"published","published":"2026-08-27T20:54:20.022Z","modified":"2026-08-28T14:13:53.473Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:20:06.562031Z"}],"euvd":[{"id":"EUVD-2026-67275","description":"Bendix EC80 Brake ECU\n is vulnerable to a stack-based buffer overflow, which may allow an \nattacker to crash the ECU. A crafted payload can then be used to \nremotely execute arbitrary code or inject arbitrary CAN bus traffic. \nThis could cause the loss of the ABS function, steering assist, \nspeedometer, and shifting.","status":"published","published":"2026-08-27T20:54:20Z","modified":"2026-08-28T14:13:53Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:01:23.608347Z"}],"ghsa":[{"id":"GHSA-g3jp-7qm3-5x6r","title":"Bendix EC80 Brake ECU\n is vulnerable to a stack-based buffer overflow, which may allow an ...","description":"Bendix EC80 Brake ECU\n is vulnerable to a stack-based buffer overflow, which may allow an \nattacker to crash the ECU. A crafted payload can then be used to \nremotely execute arbitrary code or inject arbitrary CAN bus traffic. \nThis could cause the loss of the ABS function, steering assist, \nspeedometer, and shifting.","status":"published","published":"2026-08-28T00:32:03Z","modified":"2026-08-28T00:32:11Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:11:06.356167Z"}],"nvd":[{"id":"CVE-2026-67560","description":"Bendix EC80 Brake ECU\n is vulnerable to a stack-based buffer overflow, which may allow an \nattacker to crash the ECU. A crafted payload can then be used to \nremotely execute arbitrary code or inject arbitrary CAN bus traffic. \nThis could cause the loss of the ABS function, steering assist, \nspeedometer, and shifting.","status":"published","published":"2026-08-28T00:18:08.15Z","modified":"2026-09-03T18:09:03.317Z","cvss":[{"version":"4.0","score":7.7,"vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:12:42.035353Z"}]}}