Electric Motorcycles and Scooters Face Hacking Risks to Security and Rider Safety
Source SecurityWeek
Mentioned vulnerabilities
Rated Critical by Threat Radar from the SecurityWeek text
Data as of 28 Apr 2026, 12:06 UTC
What to do
AI-suggested
Zero Motorcycles users should pair their motorcycles with their phones in secure, private locations to prevent unauthorized pairing attempts until the vendor releases the planned firmware patch in May. Monitor vendor advisories for updates on patch releases. No additional mitigation guidance is provided by the vendors at this time.
Description
Electric motorcycles from Zero Motorcycles and electric scooters from Yadea have vulnerabilities that could be exploited to compromise physical security and rider safety. Zero Motorcycles' vulnerability (CVE-2026-1354) allows an attacker within Bluetooth range to pair with the motorcycle during a specific pairing window and upload malicious firmware, potentially altering critical vehicle functions such as throttle response and braking. Yadea's T5 scooter vulnerability (CVE-2025-70994) involves weak authentication that enables an attacker to intercept and replay key fob commands to unlock and start the scooter. Zero Motorcycles plans to release a firmware patch in May, while Yadea has not yet released a fix. Both vulnerabilities require physical proximity to the vehicle for exploitation.