> CVE-2025-70994

« BACK_TO_HOME
PUBLISHED
2026-04-23 15:36
MODIFIED
2026-04-23 15:36
EPSS (Prob. Exploit)
0.27%
Top 81.1%
DATA SOURCES:
NVD 🔗 2026-04-23 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

Yadea T5 Electric Bicycles (models manufactured in/after 2024) have a weak authentication mechanism in their keyless entry system. The system utilizes the EV1527 fixed-code RF protocol without implementing rolling codes or cryptographic challenge-response mechanisms. This is vulnerable to signal forgery after a local attacker intercepts any legitimate key fob transmission, allowing for complete unauthorized vehicle operation via a replay attack.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
23/04/2026 15:36
Source: NVD
Total des modifications: 0 Dernière mise à jour: 6 months ago

> REFERENCES

https://github.com/ktauchathuranga/CVE-2025-70994
https://github.com/ktauchathuranga/ghost-keys
« BACK_TO_HOME