CVE-2026-75112

Name of the Vulnerable Software and Affected Versions OTTO® Fleet Manager (affected versions not specified)

Description An issue exists due to the use of an insufficient work factor in the bcrypt password hashing implementation. This reduces the computational cost for attackers to perform offline brute-force attacks against stored password hashes, particularly if an attacker obtains an unencrypted system backup. Real-world exploitation has been observed where compromised credentials allowed lateral movement into operational technology networks that control autonomous vehicle systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Implement runtime segmentation to contain post-compromise activity in industrial environments.