Hardcoded MQTT Credentials in Bransys ELD Exposing Real-Time Data

CVE-2026-86689

What is CVE-2026-86689?

The Bransys ELD product is affected by a vulnerability that stems from hardcoded MQTT credentials. This flaw enables unauthorized access to real-time data transmitted via an MQTT broker, allowing potential attackers to gain insight into every active device connected to the affected broker across a subset of carriers. This opens the door to various risks, including data interception and exploitation of device functionalities, highlighting a significant security oversight in the product's deployment.

References