[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsuCC4-294LWW3iZDhmUOZ47Kl_6s3VArJLp8i1TkLGc":3},{"article":4,"iocs":44,"watch_terms":55,"solutions":56,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":31},"c8655568-07d3-427f-a89a-6f99eb4afea4","Bransys ELD","bransys-eld-7110c4","View CSAF Summary Successful exploitation of these vulnerabilities could allow unauthorized access to telemetry data and firmware. The following versions of Bransys ELD are affected: Android \u003C11.00.00 (CVE-2026-86520, CVE-2026-86689, CVE-2026-77960) iOS \u003C1.1.54 (CVE-2026-86520, CVE-2026-86689, CVE-2026-77960) CVSS Vendor Equipment Vulnerabilities v3 7.5 Bransys Bransys ELD Use of Hard-coded Credentials, Cleartext Transmission of Sensitive Information Background Critical Infrastructure Sectors: Transportation Systems Countries\u002FAreas Deployed: United States Company Headquarters Location: United States Vulnerabilities Expand All + CVE-2026-86520 The affected product is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker. View CVE Details Affected Products Bransys ELD Vendor: Bransys Product Version: Bransys Android: \u003C11.00.00, Bransys iOS: \u003C1.1.54 Product Status: known_affected Remediations Vendor fix Bransys recommends that users update their system through the app store. Android users should be on version 11.00.00 or newer. iOS users should be on version 1.1.54 or newer. Relevant CWE: CWE-798 Use of Hard-coded Credentials Metrics CVSS Version Base Score Base Severity Vector String 3.1 7.5 HIGH CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N 4.0 8.7 HIGH CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N CVE-2026-86689 The affected product is susceptible to cleartext transmission of sensitive information, which could allow an attacker to connect to the broker and read all data. View CVE Details Affected Products Bransys ELD Vendor: Bransys Product Version: Bransys Android: \u003C11.00.00, Bransys iOS: \u003C1.1.54 Product Status: known_affected Remediations Vendor fix Bransys recommends that users update their system through the app store. Android users should be on version 11.00.00 or newer. iOS users should be on version 1.1.54 or newer. Relevant CWE: CWE-319 Cleartext Transmission of Sensitive Information Metrics CVSS Version Base Score Base Severity Vector String 3.1 5.9 MEDIUM CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N 4.0 8.2 HIGH CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N CVE-2026-77960 The affected product ships with hardcoded FTP credentials which could allow an attacker to connect to the server and read data. View CVE Details Affected Products Bransys ELD Vendor: Bransys Product Version: Bransys Android: \u003C11.00.00, Bransys iOS: \u003C1.1.54 Product Status: known_affected Remediations Vendor fix Bransys recommends that users update their system through the app store. Android users should be on version 11.00.00 or newer. iOS users should be on version 1.1.54 or newer. Relevant CWE: CWE-798 Use of Hard-coded Credentials Metrics CVSS Version Base Score Base Severity Vector String 3.1 5.3 MEDIUM CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N 4.0 6.9 MEDIUM CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N Acknowledgments Jaime Lightfoot reported these vulnerabilities to CISA. Legal Notice and Terms of Use This product is provided subject to this Notification (https:\u002F\u002Fwww.cisa.gov\u002Fnotification) and this Privacy & Use policy (https:\u002F\u002Fwww.cisa.gov\u002Fprivacy-policy). Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and\u002For systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov\u002Fics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov\u002Fics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. CISA also recommends users take the following measures to protect themselves from social engineering attacks: Do not click web links or open attachments in unsolicited email messages. Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams. Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks. No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. Revision History Initial Release Date: 2026-09-17 Date Revision Summary 2026-09-17 1 Initial Publication Legal Notice and Terms of Use","Multiple vulnerabilities have been identified in Bransys ELD versions prior to Android \u003C11.00.00 and iOS \u003C1.1.54. These flaws, including hard-coded MQTT and FTP credentials and cleartext transmission of sensitive information, could allow unauthorized access to telemetry data and firmware. Bransys recommends updating to the latest app versions.","Bransys ELD vulnerabilities allow unauthorized access to telemetry and firmware.","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-26-260-01",null,"2026-09-17T12:00:00+00:00","2026-09-17T18:00:41.015924+00:00",8,[17,19,22,25],{"name":6,"type":18},"product",{"name":20,"type":21},"Bransys","vendor",{"name":23,"type":24},"MQTT","technology",{"name":26,"type":24},"FTP","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":27,"icon":12,"name":29,"slug":30},"Vulnerabilities","vulnerabilities",[32,34,39],{"category":33},{"id":27,"icon":12,"name":29,"slug":30},{"category":35},{"id":36,"icon":12,"name":37,"slug":38},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":40},{"id":41,"icon":12,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[45,49,52],{"type":46,"value":47,"context":48},"cve","CVE-2026-86520","Hardcoded MQTT credentials",{"type":46,"value":50,"context":51},"CVE-2026-86689","Cleartext transmission of sensitive information",{"type":46,"value":53,"context":54},"CVE-2026-77960","Hardcoded FTP credentials",[20,6],{"controls":57,"vendors":141},[58,87,115],{"slug":59,"name":60,"problem":61,"products":62},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":88,"name":89,"problem":90,"products":91},"patch-management","Automated patch management","Known holes get closed in days, not months.",[92,99,107],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":88,"product_name":96,"url":97,"description":98},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":116,"name":117,"problem":118,"products":119},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[120,128,133],{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":129,"product_name":130,"url":131,"description":132},"tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",[],{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":158},"hard-coded-credentials-and-cleartext-transmission-expose-eld-telemetry-data","Hard-Coded Credentials and Cleartext Transmission Expose ELD Telemetry Data","Bransys ELD devices shipped with hard-coded MQTT and FTP credentials embedded in the application code, meaning any attacker who reverse-engineers the app can gain unauthorized access to telemetry data and firmware across all deployed devices simultaneously. Transmitting sensitive information in cleartext compounds the risk by allowing passive interception on any network the device communicates over. These are foundational secure-development failures — hard-coded credentials and unencrypted channels should never reach production in safety-critical transportation technology. The widespread impact is especially concerning because ELD devices are federally mandated for commercial vehicles, making them a high-value target with a large installed base.",[147,148,149,150,151,152,153,154,155,156,157],"CIS Control 4 – Secure Configuration of Enterprise Assets and Software","CIS Control 7 – Continuous Vulnerability Management","CIS Control 12 – Network Infrastructure Management","NIST SP 800-53 IA-5 – Authenticator Management (no hard-coded passwords)","NIST SP 800-53 SC-8 – Transmission Confidentiality and Integrity","NIST SP 800-53 SA-15 – Development Process, Standards, and Tools","NIST CSF PR.IP-2 – System Development Life Cycle to manage security","OWASP Mobile Top 10 M1 – Improper Credential Usage","OWASP Mobile Top 10 M5 – Insecure Communication","FMCSA 49 CFR Part 395 – ELD Mandate (regulatory context for fleet device security)","IEC 62443-4-2 – Security for Industrial Automation and Control System Components",{}]