CVE-2026-68967— Out-of-bounds Write in Bendix EC80 Brake ECU
Quick assessment
Affected
Bendix EC80ESP+ J1708
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Bendix EC80 制动 ECU 存在越界写入漏洞，攻击者可能借此构造特定载荷以建立任意写入原语，从而导致 ECU 崩溃。
Possible ATT&CK Techniques 1 AI
T1210 · Exploitation of Remote Services
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-68967
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Out-of-bounds Write in Bendix EC80 Brake ECU
Source: CVE Program / CVE List V5
Vulnerability Description
Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker
to deliver a payload that could establish an arbitrary write primitive,
which could crash the ECU.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Bendix | EC80ESP+ J1708 | Z228999 | - |
|
| Bendix | EC80ESP+ 6S/6M | Z228999 | - |
|
| Bendix | EC80ESP+ PLC | Z228999 | - |
|
| Bendix | EC80ESP+ 2nd CAN | Z228999 | - |
|
| Bendix | EC80ESP+ Integrated TPMS | Z228999 | - |
|
| Bendix | EC80ESP 6S/6M | Z266494 | - |
|
| Bendix | EC80ESP PLC | Z266494 | - |
|
| Bendix | EC80ESP 2nd CAN | Z266494 | - |
|
| Bendix | EC80ESP CAN Gateway | Z266494 | - |
|
| Bendix | EC80ESP 4S/4M | Z286098 | - |
|
| Bendix | EC80ESP PLC | Z286098 | - |
|
II. Public POCs for CVE-2026-68967
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-68967
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-68967 (1)
Same Patch Batch · Bendix · 2026-08-27 · 3 CVEs total
| CVE-2026-67560 | 7.5 HIGH | Stack-based Buffer Overflow in Bendix EC80 Brake ECU |
| CVE-2026-71396 | 5.4 MEDIUM | Use of Hard-coded Credentials in Bendix EC80 Brake ECU |
IV. Related Vulnerabilities
Same weakness: CWE-787
-
CVE-2026-78008
Fireware OS Authenticated Buffer Overflow in wgagent -
CVE-2026-81893
Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile pa -
CVE-2026-34620
DNG SDK | Out-of-bounds Write (CWE-787) -
CVE-2026-76640
Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stac -
CVE-2026-81625
Stack buffer overflow in Greenbone OS and openvas-scanner
V. Comments for CVE-2026-68967
No comments yet