Weakness in Indian Motorcycle's Infotainment System Allows Unauthenticated Access

CVE-2026-49317

What is CVE-2026-49317?

A flaw in the Infotainment system of the Indian Motorcycle Scout Bobber + Tech 2025 allows an attacker on the adjacent network to bypass the PIN entry screen. This vulnerability arises due to the incorrect order of operations during the boot process of the Infotainment system. If the Wireless Control Module (WCM) does not send messages during initialization, the system may skip the PIN authentication step, allowing unauthorized access to features that should be restricted. Attackers can exploit this by employing techniques to silence the WCM, effectively presenting the unlocked user interface without valid authentication.

References