OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-86520

HIGH · CVSS 7.5 EPSS 0.41% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

Bransys ELD contains hardcoded MQTT credentials that expose real-time data access for all active devices linked to the affected MQTT broker, posing a significant risk of unauthorized data exposure. Organizations utilizing Bransys ELD should prioritize addressing this vulnerability to prevent potential data breaches and ensure the integrity of their operational data. Immediate action is recommended for carriers relying on this system to mitigate the associated risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-86520
Severity
HIGH
CVSS
7.5
EPSS
0.41%

Original NVD Description

Bransys ELDĀ is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker.