CVE-2026-2541

The Micca KE700 system relies on a 6-bit portion of an identifier for authentication within rolling codes, providing only 64 possible combinations. This low entropy allows an attacker to perform a brute-force attack against one component of the rolling code. Successful exploitation simplify an attacker to predict the next valid rolling code, granting unauthorized access to the vehicle.

• CWE-331

• https://asrg.io/security-advisories/cve-2026-2541/

Published

Feb 15, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25404Missing Authorization vulnerability in Automattic WP Job Man…5.3
• CVE-2026-25405Contributor SQL Injection in eRoom <= 1.7.1 versions.8.5
• CVE-2026-25406Authentication Bypass Using an Alternate Path or Channel vul…8.1
• CVE-2026-25407Missing Authorization vulnerability in cookiebot Cookiebot c…4.3
• CVE-2026-25408Missing Authorization vulnerability in PluginRx Broken Link …5.3
• CVE-2026-25409Missing Authorization vulnerability in crgeary JAMstack Depl…4.3
• CVE-2026-25410Missing Authorization vulnerability in tstephenson WP-CORS w…4.3
• CVE-2026-25411Cross-Site Request Forgery (CSRF) vulnerability in themaster…4.3
• CVE-2026-25412Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-25413Unrestricted Upload of File with Dangerous Type vulnerabilit…9.9
• CVE-2026-25414Incorrect Privilege Assignment vulnerability in iqonicdesign…8.8
• CVE-2026-25415Missing Authorization vulnerability in iqonicdesign WPBookit…5.3