CVE-2026-49322

Name of the Vulnerable Software and Affected Versions Indian Motorcycle Scout Bobber + Tech 2025 model year

Description Weak authentication in the Wireless Control Module (WCM) allows an adjacent-network attacker with read access to the in-vehicle network to recover the user-set unlock PIN by passively observing a single PIN authentication exchange. The Infotainment Digital Round display computes its response using a non-cryptographic operation instead of a cryptographic challenge-response, making the PIN mathematically derivable from one captured exchange and bypassing the primary user-authentication control.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.