Skip to content
OpenAdvisories
High ICSA-26-216-01 1 CVE

Acrisure KARR BT and DR-100

Published Aug 4, 2026 · Updated Aug 4, 2026

Vendor: Acrisure Product: DR-100 Product: KARR BT

Summary

Successful exploitation of this vulnerability could allow an attacker to perform unauthorized vehicle control operations.

Vulnerabilities 1

  • High 8.1
    CVE-2026-18411

    Use of hard-coded cryptographic key in Acrisure KARR BT and DR-100

    The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth range can leverage this weakness to issue unauthorized commands to the vehicle, po…

    Acrisure DR-100 KARR BT

Revision history

  1. #1

    Initial Publication

References