Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-86689

Cleartext Transmission of Sensitive Information in Bransys ELD

Description

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bransys ELD

Default version status: unaffected

  • 0 to < 11.00.00affected
  • 11.00.00unaffected

Bransys ELD

Default version status: unaffected

  • 0 to < 1.1.54affected
  • 1.1.54unaffected

References