The Cybersecurity and Infrastructure Security Agency (CISA) has published advisory ICSA-26-260-01 detailing three vulnerabilities in Bransys Electronic Logging Device (ELD) hardware and associated Android and iOS software. The flaws involve use of hardcoded credentials and cleartext transmission of sensitive information. Successful exploitation could allow unauthorized read access to real-time telemetry data and firmware. Affected versions include Bransys Android <11.00.00 and Bransys iOS <1.1.54. CISA reports the vulnerabilities were reported by Jaime Lightfoot. No public exploitation has been confirmed, but the issues pose a risk to transportation sector critical infrastructure.

What should defenders do?

Update Bransys ELD Android to version 11.00.00 or newer and iOS to version 1.1.54 or newer via the app store. Apply network segmentation, firewall controls, and restrict internet exposure for Bransys ELD devices. Use VPNs for remote access and perform impact analysis prior to deploying defensive measures.

Which vulnerabilities are involved?

CVE-2026-86520, CVE-2026-86689, CVE-2026-77960

highVulnerability

CISA Issues Advisory for Three Bransys ELD Vulnerabilities Involving Hardcoded and Cleartext Credentials

Q: What should defenders do?

Update Bransys ELD Android to version 11.00.00 or newer and iOS to version 1.1.54 or newer via the app store. Apply network segmentation, firewall controls, and restrict internet exposure for Bransys ELD devices. Use VPNs for remote access and perform impact analysis prior to deploying defensive measures.

Q: Which vulnerabilities are involved?

CVE-2026-86520, CVE-2026-86689, CVE-2026-77960

Hardcoded MQTT and FTP credentials, plus cleartext data transmission affect Android and iOS versions; vendor recommends immediate update.

CyberIntel DeskPublished 12 days agoUpdated less than a minute ago2 min read

Key Takeaways

Three vulnerabilities disclosed in Bransys ELD affecting Android <11.00.00 and iOS <1.1.54.
CVE-2026-86520 involves hardcoded MQTT credentials with a CVSS v3 score of 7.5 (HIGH).
CVE-2026-86689 involves cleartext transmission of sensitive information with a CVSS v3 score of 5.9 (MEDIUM).
CVE-2026-77960 involves hardcoded FTP credentials with a CVSS v3 score of 5.3 (MEDIUM).
No public exploitation has been confirmed, but the flaws could allow unauthorized access to telemetry data and firmware.

Related Security News

highVulnerability

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

The maintainers of the official MCP Python SDK disclosed a security vulnerability that could allow a malicious server to trick applications into divulging OAuth credentials. The issue affects the handling of client secrets, authorization codes, and PKCE proof keys when communicating with token endpoints.

The Hacker Newsabout 4 hours ago1 min read

highCVE

CISA Adds Two Citrix NetScaler Vulnerabilities to Known Exploited Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation. CVE-2026-88771 involves improper input validation and CVE-2026-88772 involves improper restriction of operations within the bounds of a memory buffer, both affecting Citrix NetScaler products. The additions trigger remediation requirements under Binding Operational Directive 26-04 for Federal Civilian Executive Branch agencies.

CISA Advisoriesabout 5 hours ago2 min read