cve.bz

CVE-2026-2539

5.7 mediumEPSS 0.2%

Medium (5.7). EPSS 0.2% chance of exploitation in the next 30 days.

The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool (e.g., SDR) can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication.

Severity

CVSS 4.0

5.7 medium
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:P/AU:N/V:D/RE:H
EPSS
0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
CWE
CWE-319
Published
Modified
Record from
the NVD, synced

References

Check your stackJSON