CVE-2026-68967
MEDIUMCVSS 6.5/10EPSS 0.26%
Last modified
CVE-2026-68967 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU.. EPSS estimates a 0.26% chance of exploitation in the next 30 days.
Description
Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Bendix | EC80ESP+ J1708 | Z228999 |
| Bendix | EC80ESP+ 6S/6M | Z228999 |
| Bendix | EC80ESP+ PLC | Z228999 |
| Bendix | EC80ESP+ 2nd CAN | Z228999 |
| Bendix | EC80ESP+ Integrated TPMS | Z228999 |
| Bendix | EC80ESP 6S/6M | Z266494 |
| Bendix | EC80ESP PLC | Z266494 |
| Bendix | EC80ESP 2nd CAN | Z266494 |
| Bendix | EC80ESP CAN Gateway | Z266494 |
| Bendix | EC80ESP 4S/4M | Z286098 |
| Bendix | EC80ESP PLC | Z286098 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-68967?
Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker
to deliver a payload that could establish an arbitrary write primitive,
which could crash the ECU.
How severe is CVE-2026-68967?
CVE-2026-68967 has a CVSS score of 6.5/10 (MEDIUM severity). The EPSS model estimates a 0.26% probability of exploitation in the next 30 days.
How do I fix CVE-2026-68967?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-68953The affected products are vulnerable to an authentication by…6.5
- CVE-2026-68955The installer for Rakuten Kobo Desktop Application (Windows …8.4
- CVE-2026-68956Allocation of Resources Without Limits or Throttling vulnera…7.1
- CVE-2026-68959SKYSEA Client View and SKYMEC IT Manager contain a path trav…5.8
- CVE-2026-6896GitLab has remediated an issue in GitLab EE affecting all ve…5.4
- CVE-2026-68960A stack-based buffer overflow vulnerability exists in SKYSEA…5.8
- CVE-2026-68968Apache Airflow's Backfill API authorized a request against a…7.5
- CVE-2026-68969Apache Airflow wrote Variable values and Connection `extra` …6.5
- CVE-2026-6897The Wishlist Member plugin for WordPress is vulnerable to un…8.8
- CVE-2026-68970Apache Airflow's Task SDK did not mask the contents of a Var…6.5
- CVE-2026-68971Apache Airflow's asset materialization endpoint (`POST /api/…6.5
- CVE-2026-68979Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Contex…9.8
Are you affected by CVE-2026-68967?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST