AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2025-71410

MEDIUM · CVSS 5.3 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-08-07 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

Vulnerabilities in unnumbered disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can lead to session termination, resulting in the loss of Controller-Pilot Data Link Communications (CPDLC) functions and necessitating a switch back to voice communication, which increases the workload for air traffic controllers. Organizations involved in aviation operations and air traffic management should prioritize addressing this vulnerability to mitigate potential disruptions in communication and ensure operational safety.

CVE
CVE-2025-71410
Severity
MEDIUM
CVSS
5.3
EPSS
0.20%

Original NVD Description

Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio frequency.