CVE-2026-2539 MEDIUM

CVE-2026-2539: Micca KE700 Cleartext transmission of key fob ID

Vendor Micca Auto Electronics Co., Ltd.
Product Car Alarm System KE700
Weakness CWE-319 · Cleartext transmission
Published February 15, 2026
Last update February 17, 2026
View on NVD All CVEs

CVSS base score

5.7/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:P/AU:N/V:D/RE:H

What the vulnerability does

01Description

The RF communication protocol in the Micca KE700 car alarm system does not encrypt its data frames. An attacker with a radio interception tool (e.g., SDR) can capture the random number and counters transmitted in cleartext, which is sensitive information required for authentication.

Key dates

02Disclosure timeline

February 15, 2026 CVE published
February 17, 2026 Record updated