CVE-2026-67560: high-severity vulnerability in Bendix EC80ESP 2nd CAN
Stack-based Buffer Overflow in Bendix EC80 Brake ECU
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.7epss 0.3%
Bendix EC80 Brake ECU
is vulnerable to a stack-based buffer overflow, which may allow an
attacker to crash the ECU. A crafted payload can then be used to
remotely execute arbitrary code or inject arbitrary CAN bus traffic.
This could cause the loss of the ABS function, steering assist,
speedometer, and shifting.
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Bendix · EC80ESP 2nd CANBendix · EC80ESP+ 2nd CANBendix · EC80ESP 4S/4MBendix · EC80ESP 6S/6MBendix · EC80ESP+ 6S/6MBendix · EC80ESP CAN GatewayBendix · EC80ESP+ Integrated TPMSBendix · EC80ESP+ J1708Bendix · EC80ESP PLCBendix · EC80ESP+ PLCRelated CVEs — Bendix EC80ESP 2nd CAN
In the same product, most dangerous first.