CVE-2026-2541
The Micca KE700 system relies on a 6-bit portion of an identifier for authentication within rolling codes, providing only 64 possible combinations. This low entropy allows an attacker to perform a brute-force attack against one component of the rolling code. Successful exploitation simplify an attacker to predict the next valid rolling code, granting unauthorized access to the vehicle.
- Score
- CVSS 4.0 6.4 Medium
- Status
- Deferred - cve@asrg.io
- Published
- 2026-02-15
- Last modified
- 2026-02-17
- Weaknesses
- CWE-331
Affected products
References
- https://asrg.io/security-advisories/cve-2026-2541/