Is CVE-2026-68967 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-68967 being exploited in the wild.

How severe is CVE-2026-68967?

Medium severity, with a CVSS score of 6.5, published 28 August 2026.

Which products and versions are affected?

Bendix EC80 Brake ECU EC80ESP+ J1708 Z228999, EC80ESP+ 6S/6M Z228999, EC80ESP+ PLC Z228999, EC80ESP+ 2nd CAN Z228999, EC80ESP+ Integrated TPMS Z228999, EC80ESP 6S/6M Z266494, EC80ESP PLC Z266494, EC80ESP 2nd CAN Z266494, EC80ESP CAN Gateway Z266494, EC80ESP 4S/4M Z286098, EC80ESP PLC Z286098.

Is there a fix for CVE-2026-68967?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-68967 attacked?

It is attacked from the adjacent network, in device firmware.

Am I affected by CVE-2026-68967?

Check whether you run Bendix EC80 Brake ECU at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-68967: Bendix EC80 Brake ECU out-of-bounds write

CVE-2026-68967 · Severity: medium · CVSS 6.5 · Published 2026-08-28

The Bendix EC80 Brake ECU is an embedded control unit that manages critical braking functions in commercial vehicles, including ABS, steering assist, and traction control. An attacker who exploits this out-of-bounds write vulnerability could crash the ECU or establish arbitrary write capabilities, potentially disabling braking and safety systems and creating a severe safety hazard.

Technologies: Bendix EC80 Brake ECU. Vendors: Bendix.

Quick answers

Is CVE-2026-68967 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-68967 being exploited in the wild.
How severe is CVE-2026-68967?: Medium severity, with a CVSS score of 6.5, published 28 August 2026.
Which products and versions are affected?: Bendix EC80 Brake ECU EC80ESP+ J1708 Z228999, EC80ESP+ 6S/6M Z228999, EC80ESP+ PLC Z228999, EC80ESP+ 2nd CAN Z228999, EC80ESP+ Integrated TPMS Z228999, EC80ESP 6S/6M Z266494, EC80ESP PLC Z266494, EC80ESP 2nd CAN Z266494, EC80ESP CAN Gateway Z266494, EC80ESP 4S/4M Z286098, EC80ESP PLC Z286098.
Is there a fix for CVE-2026-68967?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-68967 attacked?: It is attacked from the adjacent network, in device firmware.
Am I affected by CVE-2026-68967?: Check whether you run Bendix EC80 Brake ECU at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is an out-of-bounds write flaw in the Bendix EC80 Brake ECU firmware that allows an attacker to write data beyond allocated memory boundaries. A crafted CAN bus payload delivered to the device could be used to establish an arbitrary write primitive, enabling code execution, memory corruption, or system crash. The attack vector is adjacent network (CAN bus) with no authentication required, though physical access to the vehicle is typically needed to inject CAN messages. Successful exploitation could crash the ECU and disable critical safety functions including ABS, steering assist, speedometer, and traction control. Firmware patches are available from Bendix—affected Z228999 versions should update to Z300822, Z266494 versions to Z302578, and Z286098 versions to Z302579.

Affected products

Bendix EC80 Brake ECU EC80ESP+ J1708 Z228999, EC80ESP+ 6S/6M Z228999, EC80ESP+ PLC Z228999, EC80ESP+ 2nd CAN Z228999, EC80ESP+ Integrated TPMS Z228999, EC80ESP 6S/6M Z266494, EC80ESP PLC Z266494, EC80ESP 2nd CAN Z266494, EC80ESP CAN Gateway Z266494, EC80ESP 4S/4M Z286098, EC80ESP PLC Z286098

Timeline

2026-08-25: disclosed
2026-08-25: advisory: CISA ICSA-26-237-05 advisory published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.