CVE-2025-71410: Atn-b1 Cpdlc

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio frequency.

Affected products

Published 2026-08-07. Last modified 2026-09-29.