Skip to content
OpenAdvisories
High ICSA-26-260-01 3 CVEs

Bransys ELD

Published Sep 17, 2026 · Updated Sep 17, 2026

Vendor: Bransys Product: Android Product: iOS

Summary

Successful exploitation of these vulnerabilities could allow unauthorized access to telemetry data and firmware.

Vulnerabilities 3

  • High 7.5
    CVE-2026-86520

    Use of Hard-coded Credentials in Bransys ELD

    Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker.

    Bransys ELD
  • Medium 5.9
    CVE-2026-86689

    Cleartext Transmission of Sensitive Information in Bransys ELD

    Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker.

    Bransys ELD
  • Medium 5.3
    CVE-2026-77960

    Use of Hard-coded Credentials in Bransys ELD

    Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker.

    Bransys ELD

Revision history

  1. #1

    Initial Publication

References