CVE-2026-68967: CWE-787 in Bendix EC80ESP+ J1708

CVE-2026-68967 describes an out-of-bounds write vulnerability in the Bendix EC80ESP+ J1708 Brake ECU. This flaw could be exploited by an attacker to deliver a payload that establishes an arbitrary write primitive, which may result in crashing the ECU. The vulnerability does not require user interaction or privileges and can be exploited remotely over an adjacent network (AV:A, PR:N, UI:N). The impact is limited to integrity loss without confidentiality or availability impact (C:N/I:H/A:N). No known exploits are reported in the wild, and no vendor patch or mitigation guidance is currently available.

An attacker exploiting this vulnerability could cause the Bendix EC80 Brake ECU to crash by performing arbitrary writes outside the intended memory bounds. This compromises the integrity of the ECU's operation but does not affect confidentiality or availability directly. There is no indication of remote code execution or data disclosure from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published by Bendix as of the publication date. Monitor vendor communications for updates.