Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
3692advisories found
csaf_susehigh · 8.2
suse-su-2026:4534-1
The advisory covers security fixes for the Python 3.12 runtime (python312), addressing numerous vulnerabilities including tarfile extraction filter bypasses, denial-of-service conditions, buffer overflows, and code-execution flaws in modules such as tarfile, configparser, http.client, and decompression libraries. An attacker could exploit these to escape extraction directories, cause crashes or resource exhaustion, inject configuration content, or in some cases achieve arbitrary code execution or information disclosure. The advisory does not state an overall severity rating. This could be relevant where Python is deployed in automotive systems, for example in infotainment, telematics, or backend tooling. Confirm applicability through the product SBOM or dependency inventory.
csaf_microsofthigh · 8.2
cve-2026-71971
U-Boot versions before 2026.10-rc3 contain an out-of-bounds write in IP fragment reassembly, which an attacker could exploit to corrupt memory. This could be relevant where U-Boot is deployed in automotive systems, since U-Boot is a bootloader commonly used in embedded devices. Confirm applicability through the product SBOM or dependency inventory.
csaf_microsofthigh · 8.2
cve-2026-74221
U-Boot versions before 2026.10-rc5 contain a buffer overflow vulnerability in the NFS READLINK functionality. An attacker could potentially exploit this overflow to corrupt memory or execute arbitrary code, though the advisory does not state a specific severity rating. This could be relevant where U-Boot is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
csaf_microsofthigh · 8.2
cve-2026-74220
U-Boot versions before 2026.10-rc5 contain a buffer overflow vulnerability in the NFS READ reply handling. An attacker could potentially exploit this overflow to corrupt memory or execute arbitrary code, though the advisory does not state a specific severity rating. This could be relevant where U-Boot is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
csaf_microsofthigh · 8.2
cve-2026-84782
A flaw in the DTLS handshake handling of affected OpenSSL-based Microsoft products causes handshake messages to be retransmitted from a stale buffer offset, which an attacker could potentially exploit to disrupt or manipulate secure communications. The advisory does not state a severity rating or confirm any automotive deployment. This could be relevant where this DTLS implementation is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
csaf_siemenshigh · 8.2
ssa-330084
Siemens has identified a Client Code Execution vulnerability in its Desigo CC product family, where an attacker can craft a malicious graphics document containing embedded scripts. If a user with sufficient privileges opens this document, the script executes on the client application, allowing the attacker to write arbitrary files to the client's operating system, potentially compromising the system and enabling lateral movement within the organization. The advisory does not specify a severity rating, and while Desigo CC is a building automation product, the advisory does not explicitly state an automotive connection, so this could be relevant where Desigo CC is deployed in automotive or related facilities; confirm applicability through the product SBOM or dependency inventory.
csaf_opensusehigh · 8.2
rhsa-2026:59723
This security update addresses multiple vulnerabilities in the Linux kernel, including issues in memory management, network tunneling, netfilter, SCTP, and zram components. An attacker could potentially cause denial of service through excessive CPU usage, system crashes from use-after-free conditions, or incorrect network packet filtering behavior. The advisory does not confirm automotive deployment, but this could be relevant where the Linux kernel is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.2
cve-2026-77237
A vulnerability in FreeRTOS-Kernel versions before 11.3.1 could allow an unprivileged task on MPU-enabled ports with queue sets enabled to read privileged kernel memory. This could be relevant where FreeRTOS-Kernel is deployed in automotive systems, such as in embedded control units, and an attacker could exploit this to access sensitive data. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.2
cve-2026-63362
This vulnerability affects the OPC UA communication protocol used in automotive manufacturing plants and assembly lines for secure machine-to-machine data exchange. An attacker could send a specially crafted UDP packet to trigger an integer underflow in the signature verification process, potentially causing a denial of service that disrupts production systems. The severity is moderate, as it requires network access to the OPC UA server but could halt critical automation processes in vehicle manufacturing.
csaf_abbhigh · 8.1
4jno000550-1189
ABB's Advanced Batch Management product contains a publicly disclosed vulnerability in the Brotli decoder within its Node.js runtime, which Advanced Batch Management uses to run Node-RED. An attacker with network access to an affected system node could supply a specially crafted Brotli-compressed stream to cause the node to stop or become inaccessible, disclose process memory, or insert and run arbitrary code. ABB states there is no impact on functional safety and that in the standard configuration no default path to the vulnerable decoder was identified.
csaf_cisahigh · 8.1
icsa-26-293-03
Moxa AIG-302 ThingsPro Edge contains two vulnerabilities: a missing authorization flaw in the internal API /api/v1/secrets/ that lets a privileged authenticated attacker with adjacent network access access sensitive information, potentially disclosing confidential data including cryptographic key material, and a hard-coded cryptographic key flaw in /usr/bin/sysman that lets an unauthenticated attacker with adjacent network access use exposed private key material to compromise the confidentiality and integrity of communications. The advisory does not state a numeric severity score, and notes these vulnerabilities are not exploitable remotely and that no known public exploitation has been reported. This could be relevant where Moxa AIG-302 ThingsPro Edge is deployed in automotive or industrial systems. Confirm applicability through the product SBOM or dependency inventory.
csaf_redhathigh · 8.1
rhsa-2026:81175
The advisory covers an update to the LVMS 4.19 operator container image for OpenShift, which bumps the Go version to fix four Important-severity flaws in Go libraries: denial of service via excessive recursion in encoding/asn1, cross-site scripting in html/template, denial of service via XML decoding recursion in encoding/xml, and denial of service via indefinite KeyUpdate messages in crypto/tls. An attacker could exploit these remotely and without authentication to exhaust resources or inject scripts, rendering affected services unavailable or compromising user data. This could be relevant where LVMS or the affected Go libraries are deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.1
cve-2026-19186
A flaw in the Zephyr real-time operating system's IEEE 802.15.4 wireless networking code lets a nearby attacker crash or corrupt memory on a vulnerable device by sending a single specially crafted short radio frame, with no authentication or key material required. The issue only affects builds that enable the experimental 802.15.4 security option and have an active security session; the impact is memory corruption and denial of service rather than data theft. This could be relevant where Zephyr-based 802.15.4 devices are deployed in automotive systems, such as in-vehicle sensor networks or charging infrastructure. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.1
cve-2026-76886
The advisory describes a heap-based buffer overflow in the C12.22 protocol dissector of Wireshark, affecting versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18, which can cause a crash and lead to a denial of service. An attacker could exploit this by crafting malicious network traffic to crash the application. This could be relevant where Wireshark is deployed in automotive systems for network analysis or diagnostics, but the advisory does not confirm automotive use; confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.1
cve-2026-12633
This advisory describes a vulnerability in the Zephyr operating system's IPv6 networking code, specifically in how it handles 6LoWPAN Context Options within Router Advertisements. An unauthenticated attacker on the same network link could send a specially crafted packet that triggers an out-of-bounds memory write, potentially causing a denial of service through system crashes or memory corruption. The severity is high due to the remote exploitability from adjacent networks, and while Zephyr is an embedded operating system often used in automotive applications, this advisory does not confirm specific automotive deployment. This could be relevant where Zephyr is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.1
cve-2026-63035
This vulnerability affects the OPC UA industrial control protocol stack used in automotive manufacturing plants and assembly lines for secure machine-to-machine communication. An authenticated attacker could exploit a heap use-after-free flaw in the TransferSubscriptions service to cause a denial of service or potentially execute arbitrary code on affected systems. This is a critical risk that could disrupt production line operations or allow unauthorized control of manufacturing equipment.
fkie_nvdhigh · 8.1
cve-2026-13308
This vulnerability affects EV charging infrastructure including wallboxes, DC fast chargers, and charging station management systems, specifically the Autel MaxiCharger AC Elite Home EV charger. An attacker can remotely execute arbitrary code on the device without needing any authentication by sending a specially crafted WebSocket message that triggers an integer underflow error. This is a critical severity issue because it allows complete takeover of the charger, potentially disrupting charging operations or using the device as a foothold for broader network attacks.
csaf_cisahigh · 8.1
icsa-26-204-06
This vulnerability affects the IEC 61850 protocol stack used in substation automation systems for electric vehicle charging infrastructure, smart grid integration, and manufacturing plant power management. An unauthenticated network-adjacent attacker could crash critical services or execute arbitrary code by sending specially crafted messages, potentially disrupting protection and control functions in energy and transportation systems. The vulnerabilities are rated as critical, with remote code execution demonstrated when ASLR is disabled, though no active exploitation has been reported yet.
fkie_nvdhigh · 8.0
fkie_cve-2026-83838
The advisory describes an integer underflow in the Windows Bluetooth A2DP driver that lets an authorized attacker on an adjacent network elevate privileges. Microsoft rates this as important severity. This could be relevant where the Windows Bluetooth A2DP driver is deployed in automotive systems, such as infotainment or telematics units running Windows. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.0
cve-2026-96844
An integer underflow vulnerability in the Microsoft Bluetooth Driver affects numerous Windows 10, Windows 11, and Windows Server versions. An authorized attacker on an adjacent network could exploit this flaw to elevate privileges. The advisory does not state a severity rating. This could be relevant where the Microsoft Bluetooth Driver is deployed in automotive systems, such as infotainment or telematics units running Windows. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh · 8.0
cve-2026-56967
A heap buffer overflow in the Cellular Modem component could allow an attacker within close range to execute code remotely without any user interaction or extra privileges. This could be relevant where the affected modem component is deployed in automotive systems, since cellular modems are sometimes used for vehicle connectivity. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh · 8.0
cve-2026-42807
Bosch Sensortec COINES_SDK versions 2.10 through 2.12.2 contain a heap-based buffer overflow in its PC bridge protocol decoder, which trusts a packet length from an external device and can overwrite host memory. A malicious or compromised USB or Bluetooth Low Energy peripheral could crash the host process or potentially execute arbitrary code. This could be relevant where COINES_SDK is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdhigh · 8.0
cve-2026-18282
The advisory describes a heap-based buffer overflow vulnerability in the Sony XAV-9500ES, an automotive head unit, specifically in its handling of AVRCP Bluetooth packets. An attacker who can pair a malicious Bluetooth device with the unit could exploit this flaw to execute arbitrary code on the device. The severity is high, as it allows remote code execution in the context of the device, though the attacker must first gain Bluetooth pairing access. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh · 8.0
cve-2026-18281
The advisory describes a heap-based buffer overflow vulnerability in the Sony XAV-9500ES, a device that is directly automotive-related as an in-car infotainment system. An attacker who can pair a malicious Bluetooth device with the system could exploit this flaw in the handling of Bluetooth L2CAP packets to execute arbitrary code on the device. The stated technical impact is remote code execution in the context of the device, with the vulnerability requiring network-adjacent access and prior Bluetooth pairing. Confirm applicability through the product SBOM or dependency inventory.
csaf_microsofthigh · 7.9
cve-2026-78408
The advisory describes a vulnerability in util-linux, specifically in the nsenter tool's --join-cgroup option, which leaks root cgroup migration authority. An attacker could exploit this flaw to gain unauthorized control over cgroup settings, potentially leading to privilege escalation or system compromise. The severity is not explicitly stated in the provided text. This could be relevant where util-linux is deployed in automotive systems, such as in embedded Linux environments, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.