Is CVE-2026-71396 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-71396 being exploited in the wild.

How severe is CVE-2026-71396?

Medium severity, with a CVSS score of 5.4, published 28 August 2026.

Which products and versions are affected?

Bendix EC80 Brake ECU EC80ESP+ J1708 Z228999, EC80ESP+ 6S/6M Z228999, EC80ESP+ PLC Z228999, EC80ESP+ 2nd CAN Z228999, EC80ESP+ Integrated TPMS Z228999, EC80ESP 6S/6M Z266494, EC80ESP PLC Z266494, EC80ESP 2nd CAN Z266494, EC80ESP CAN Gateway Z266494, EC80ESP 4S/4M Z286098, EC80ESP PLC Z286098.

Is there a fix for CVE-2026-71396?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-71396 attacked?

It is attacked from the adjacent network.

Am I affected by CVE-2026-71396?

Check whether you run Bendix EC80 Brake ECU at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-71396: Bendix EC80 Brake ECU hard-coded credentials

CVE-2026-71396 · Severity: medium · CVSS 5.4 · Published 2026-08-28

The Bendix EC80 Brake ECU is a critical safety controller in commercial vehicles that manages automatic traction control, ABS, steering assist, and other brake functions. An attacker with access to hard-coded credentials could remotely disable traction control and other safety systems, creating a serious risk of vehicle accidents and injuries.

Technologies: Bendix EC80 Brake ECU. Vendors: Bendix.

Quick answers

Is CVE-2026-71396 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-71396 being exploited in the wild.
How severe is CVE-2026-71396?: Medium severity, with a CVSS score of 5.4, published 28 August 2026.
Which products and versions are affected?: Bendix EC80 Brake ECU EC80ESP+ J1708 Z228999, EC80ESP+ 6S/6M Z228999, EC80ESP+ PLC Z228999, EC80ESP+ 2nd CAN Z228999, EC80ESP+ Integrated TPMS Z228999, EC80ESP 6S/6M Z266494, EC80ESP PLC Z266494, EC80ESP 2nd CAN Z266494, EC80ESP CAN Gateway Z266494, EC80ESP 4S/4M Z286098, EC80ESP PLC Z286098.
Is there a fix for CVE-2026-71396?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-71396 attacked?: It is attacked from the adjacent network.
Am I affected by CVE-2026-71396?: Check whether you run Bendix EC80 Brake ECU at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The Bendix EC80 Brake ECU contains hard-coded credentials that provide unauthenticated access to critical functionality. An attacker with network or physical access to the vehicle's CAN bus or diagnostic interface can use these credentials to authenticate and execute commands that disable automatic traction control and other safety-critical systems. The vulnerability requires adjacency to the vehicle (CAN bus or OBD-II access) but does not require user interaction. Exploitation could cause loss of ABS function, steering assist, speedometer, or shifting capabilities. Firmware updates addressing this and related vulnerabilities (CVE-2026-67560 and CVE-2026-68967) are available from Bendix.

Affected products

Bendix EC80 Brake ECU EC80ESP+ J1708 Z228999, EC80ESP+ 6S/6M Z228999, EC80ESP+ PLC Z228999, EC80ESP+ 2nd CAN Z228999, EC80ESP+ Integrated TPMS Z228999, EC80ESP 6S/6M Z266494, EC80ESP PLC Z266494, EC80ESP 2nd CAN Z266494, EC80ESP CAN Gateway Z266494, EC80ESP 4S/4M Z286098, EC80ESP PLC Z286098

Timeline

2026-08-25: disclosed
2026-08-28: published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.