Exposure monitor
Vulnerabilities
Automotive Vulnerabilities. Hunted worldwide every 24 hours, across 🇺🇸🇨🇳🇯🇵🇰🇷🇹🇼🇩🇪🇫🇷🇨🇭🇦🇹🇳🇱🇧🇪🇵🇱🇨🇦🇱🇺🇪🇺. Stay ahead.
3692advisories found
csaf_pilzgmbhcokghigh · 8.8
ppsa-2026-003
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically the Pilz IndustrialPI industrial PC running Linux. An attacker with local access who can execute code on the device could exploit multiple Linux kernel flaws to gain full control over the system, potentially disrupting production operations or manipulating safety-critical processes. The severity is high for manufacturing environments, and Pilz recommends updating to firmware version 15.06.2026 or patching the kernel to version 6.12.91-revpi0-rpi-v8 to mitigate the risk.
csaf_cisahigh · 8.8
icsa-26-211-08
This vulnerability affects the OPC UA communication protocol stack (open62541) used in automotive manufacturing plants and assembly lines for industrial control system interoperability. An attacker could exploit these flaws to cause denial of service, disclose sensitive information, or potentially execute arbitrary code on affected systems, with the most severe issues involving heap memory corruption and out-of-bounds writes. CISA recommends isolating these systems from the internet and using VPNs for remote access, though no active exploitation has been reported yet.
cvelistv5high · 8.8
cve-2026-65423
This vulnerability affects the OPC UA industrial communication protocol used in automotive manufacturing plants and assembly lines for robot control and production monitoring. An integer overflow in the open62541 library could allow a remote attacker to trigger an out-of-bounds write, potentially causing system crashes or enabling code execution on factory floor equipment. This is a critical severity issue that could disrupt vehicle production or allow unauthorized control of manufacturing systems.
csaf_weidmuellerinterfacegmbhcokghigh · 8.8
vde-2026-081
This vulnerability affects industrial security routers used in automotive manufacturing plants and assembly lines to segment and protect network traffic between production equipment and enterprise systems. Multiple flaws in the router firmware could allow an attacker to gain full administrator access, lock out legitimate users, crash the device, or redirect personnel to phishing sites, while additional bugs in bundled software could enable DNS poisoning or denial-of-service attacks. Weidmueller has released firmware version V2.3.0 to fix all these issues, and you should update affected routers immediately and change default passwords.
csaf_adstecindustrialitgmbhhigh · 8.8
vde-2026-076
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically the ADS-TEC IRF1000 and IRF3000 devices used for industrial networking. An attacker with low-level access could escalate to administrator privileges, lock out user accounts, crash the configuration service, or trick users into phishing sites, while bundled components like dnsmasq and OpenSSL introduce risks of DNS cache poisoning and denial-of-service attacks. The severity is high for the privilege escalation and account lockout flaws, though the OpenSSL issues are low severity, and all vulnerabilities are fixed in firmware version 2.3.0.
fkie_nvdhigh · 8.8
cve-2026-51275
This vulnerability affects the ESP32 chipset, which is used in automotive-grade infotainment systems, telematics units, and aftermarket audio modules for media playback and hands-free calling. An attacker can exploit a heap-based buffer overflow by sending a specially crafted MP3 file to the device, potentially allowing remote code execution or a system crash. This is a critical security issue that could compromise vehicle audio systems and requires immediate patching.
fkie_nvdhigh · 8.8
cve-2026-51274
This vulnerability affects the ESP32 chipset, which is used in automotive-grade chips for telematics, infotainment, and aftermarket audio systems in vehicles. An attacker can exploit a heap-based buffer overflow in the MP3 audio parser by sending a crafted file, potentially causing a system crash, leaking sensitive information, or executing malicious code. This is a critical security issue that could compromise vehicle audio systems and connected services.
fkie_nvdhigh · 8.8
cve-2026-11826
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically the OpenPLC_v3 runtime used for programmable logic control. An authenticated attacker with web interface access can send a crafted request that overflows a buffer in the Modbus master component, corrupting adjacent memory and causing the PLC process control loop to crash, resulting in denial of service. The issue is severe because it can halt production line operations, and no fix is available as the vendor has archived the repository and confirmed it does not affect the newer OpenPLC Runtime v4.
csaf_mettlertoledogmbhhigh · 8.8
vde-2026-066
This vulnerability affects industrial control systems deployed in automotive manufacturing plants and assembly lines, specifically METTLER TOLEDO FreshWay B/D scales running Windows. An attacker could exploit unpatched Windows vulnerabilities to remotely execute code, elevate privileges, or disclose sensitive information, increasing operational risk. The severity is high, and immediate installation of cumulative Windows security patches through March 2026 is required to protect manufacturing systems.
fkie_nvdhigh · 8.7
fkie_cve-2026-22105
Delta UFC500 charging stations derive the default Service account password from character positions of the device serial number. An unauthenticated attacker with adjacent network access can reconstruct that password or exhaust the keyspace, then log in to read and change sensitive settings such as the OCPP backend. The advisory does not state a severity rating.
fkie_nvdhigh · 8.7
fkie_cve-2026-68906
libIEC61850, an open-source implementation of IEC 61850 client and server protocols, contains a flaw in versions before 1.6.2 where a malformed AARE message during connection setup can cause an infinite CPU loop or a one-byte out-of-bounds read leading to a process crash. An unauthenticated remote attacker could exploit this to cause a denial of service. This could be relevant where libIEC61850 is deployed in automotive systems, though the advisory does not confirm an automotive connection. Confirm applicability through the product SBOM or dependency inventory.
csaf_susehigh · 8.7
suse-su-2026:4518-1
This Linux kernel live-patch update fixes multiple security vulnerabilities in the SUSE Linux Enterprise 15 SP7 kernel, including use-after-free, out-of-bounds read, and double-free flaws in networking subsystems such as xfrm/IPsec, IPv6, Bluetooth, SCTP, and iSCSI target handling. An attacker could potentially trigger memory corruption or kernel crashes, and some issues are reachable by unprivileged users, though the advisory does not state a numeric severity rating. This could be relevant where the Linux kernel is deployed in automotive systems, so confirm applicability through the product SBOM or dependency inventory.
csaf_susehigh · 8.7
suse-su-2026:4537-1
This Linux kernel live-patch update from SUSE fixes multiple security vulnerabilities in kernel networking, storage, and driver subsystems, including use-after-free, double-free, out-of-bounds read, and race condition flaws. An attacker could potentially exploit these issues to cause kernel crashes, memory corruption, or denial of service, though the advisory does not assign specific severity ratings to individual CVEs. This could be relevant where the Linux kernel is deployed in automotive systems, such as in infotainment head units, telematics control units, or gateway ECUs running SUSE Linux Enterprise. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.7
cve-2026-71890
Bouncy Castle for Java before 1.86 contains a flaw in its MLS group-messaging validation: anyone holding a group's public GroupInfo could submit an external commit that removes any chosen member, and all members would accept it, evicting that member and letting the attacker take over their place in the group's key structure. This could be relevant where Bouncy Castle's MLS implementation is deployed in automotive systems, for example in vehicle-to-cloud or vehicle-to-vehicle secure group messaging. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh · 8.7
cve-2026-54571
ESPAsyncWebServer, a web server library used on ESP32, ESP8266, RP2040 and RP2350 microcontrollers, has an integer overflow in its multipart form-data parser before version 3.11.1. A remote attacker could send a request with a 256-byte multipart boundary, causing the parser to loop endlessly, consume excessive CPU, and trigger a watchdog reset that reboots the device, resulting in a denial of service. This could be relevant where ESPAsyncWebServer is deployed in automotive or embedded systems; confirm applicability through the product SBOM or dependency inventory.
nvdhigh · 8.7
cve-2026-52836
OpenDDS, an open source implementation of the Data Distribution Service (DDS) messaging standard, has a flaw before version 3.34.0 in which a network attacker can crash a reachable participant by sending a malformed RTPS UDP submessage, causing an invalid memory read and process termination. No authentication or victim interaction is required, and the impact is a remotely exploitable denial of service that destroys the DDS entities hosted by the affected participant. This could be relevant where OpenDDS is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
nvdhigh · 8.7
cve-2026-73174
Advantech EKI-1242EIMS devices running firmware V1.06.01 have a vulnerability in the edgserver management protocol where sensitive information is transmitted in cleartext. A network-adjacent attacker who passively observes traffic could intercept management communications and recover sensitive device identity and network metadata. This could be relevant where the affected Advantech device is deployed in automotive systems; confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.7
cve-2026-33197
AMI AptioV BIOS contains a vulnerability where a privileged user with local access can bypass secure boot due to an incomplete list of disallowed inputs, potentially leading to arbitrary code execution and impacting system confidentiality, integrity, and availability. This could be relevant where AMI AptioV is deployed in automotive systems, such as in vehicle infotainment or control units, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.7
cve-2026-14297
The advisory describes a buffer overflow vulnerability in the Bluetooth Continuous Glucose Monitoring Service's Record Access Control Point write handler, where an authenticated Bluetooth Low Energy peer can overflow a fixed 20-byte buffer into adjacent memory. The technical impact is unpredictable because it depends on the specific firmware's memory layout, which varies by build. This could be relevant where the nRF Connect SDK is deployed in automotive systems, such as for Bluetooth-based vehicle access or telematics, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.7
cve-2026-84304
gRPC-Go, a Go language implementation of gRPC, has a vulnerability prior to version 1.83.1 where fragmented HTTP/2 data frames can cause excessive heap memory usage, potentially leading to a denial of service via out-of-memory termination. An unauthenticated remote attacker could exploit this by sending millions of one-byte frames across concurrent streams. This could be relevant where gRPC-Go is deployed in automotive systems, such as in vehicle-to-cloud communication or telematics services. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.7
cve-2026-81721
The advisory describes a denial-of-service vulnerability in openssl_encrypt versions before 1.4.9, where attackers can craft malicious encrypted files with invalid key derivation function (KDF) cost parameters, causing unbounded memory allocation and potentially crashing the system without authentication. This could be relevant where openssl_encrypt is deployed in automotive systems, such as for secure data storage or communication, but the advisory does not confirm automotive use. Confirm applicability through the product SBOM or dependency inventory.
cvelistv5high · 8.7
cve-2026-81703
openssl_encrypt versions before 1.4.9 fail to validate whether embedded post-quantum private keys are actually encrypted, allowing attackers to craft files with unencrypted keys that decrypt under any password and bypass authentication, producing attacker-chosen plaintext with false integrity verification. This could be relevant where openssl_encrypt is deployed in automotive systems, such as for secure file storage or key management. Confirm applicability through the product SBOM or dependency inventory.
nvdhigh · 8.7
cve-2026-81699
openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust system resources and crash or wedge the process before password verification occurs. This could be relevant where openssl_encrypt is deployed in automotive systems, such as in file-processing or encryption components; confirm applicability through the product SBOM or dependency inventory.
nvdhigh · 8.7
cve-2026-81687
openssl_encrypt versions before 1.4.9 fail to limit the time spent on key derivation function iterations specified in file metadata, allowing attackers to craft files with extremely high iteration counts that consume CPU resources for an unbounded period, causing a denial of service. This could be relevant where openssl_encrypt is deployed in automotive systems, such as in file-handling or encryption components. Confirm applicability through the product SBOM or dependency inventory.
csaf_cisahigh · 8.7
icsa-26-239-02
The advisory describes vulnerabilities in the All-Line Equipment Company Fuel-Boss product, which could allow attackers to remotely execute arbitrary commands or code on affected systems. The affected component is the University of Washington IMAP Toolkit, which has a command injection flaw and a stack-based buffer overflow, and the advisory also notes a separate issue in PHP versions up to 7.1.5 that could enable remote code execution under certain configurations. This could be relevant where Fuel-Boss is deployed in automotive or transportation systems, as the advisory lists Transportation Systems as a critical infrastructure sector, but the automotive connection is not confirmed. Confirm applicability through the product SBOM or dependency inventory.