CVE-2026-18411
30-day in-the-wild exploitation forecast
Description
The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth range can leverage this weakness to issue unauthorized commands to the vehicle, potentially allowing unauthorized access to vehicle functions, including door unlocking and engine immobilization.
CVSS Vector Details
Modify values to recalculate the CVSS score in real-time
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
Affected Software Configurations
- Acrisure Karr Bt
- Acrisure Dr-100
Weaknesses (CWE)
- CWE-321
Exploit Prediction Scoring System (EPSS)
0.34% probability of exploitation in the next 30 days.
Higher than 27% of all CVEs
Official Advisories & References
External Resources
Technical Resources
Community & Discussion
Critical Vulnerabilities — Last 7 Days
Real-time tracking of CVSS 9.0+ remote execution zero-days, public exploit code, and ransomware-linked vulnerabilities disclosed this week.
CVE History Timeline
Frequently Asked Questions
CVE-2026-18411 is a High severity security vulnerability affecting Acrisure Karr Bt. The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth range can...
This vulnerability has a CVSS score of 8.1 out of 10, rated as High. High severity vulnerabilities pose significant risk and could allow attackers to gain elevated privileges or access sensitive data.
This vulnerability affects Acrisure Karr Bt products. Users of affected versions should apply security updates immediately.
To protect against CVE-2026-18411, you should: (1) Apply the latest security patches from Acrisure, (2) Check official security advisories for specific remediation steps, (3) Update affected software to the latest version, and (4) Monitor your systems for any signs of exploitation.
This vulnerability was publicly disclosed on August 5, 2026. Organizations should check if they were vulnerable during the period before the patch was available.
No public exploit code has been confirmed for CVE-2026-18411 at this time. Security teams should monitor threat feeds for emerging developments and apply vendor patches proactively.
Currently, CVE-2026-18411 is not recorded in the CISA Known Exploited Vulnerabilities (KEV) catalog as being actively exploited in the wild. Security teams should still patch proactively to prevent zero-day targeting.