PT-2026-44853 · Indian Motorcycle · Scout Bobber + Tech

CVE-2026-49325 · Published 2026-05-29 · Updated 2026-06-27

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Indian Motorcycle Scout Bobber + Tech version 2025

Description Improper handling of physical conditions in the bike-shutdown control allows a physical attacker with access to the Wireless Control Module (WCM) wiring harness to bypass the anti-theft shutdown. The WCM signals shutdown to a peer ECU via a falling-edge voltage transition on a dedicated wire pair. Because the receiving ECU cannot distinguish between an active shutdown pulse and an open-circuit or disconnected condition, interrupting the relevant wires allows the motorcycle to remain fully operable without the WCM validating the rider's PIN.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-693

CWE-754

CWE-1384

Related Identifiers

CVE-2026-49325

Affected Products

Scout Bobber + Tech

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-49325 · Security Note
• https://t.me/cveNotify/177959 · Telegram Post
• https://cwe.mitre.org/data/definitions/1384.html · Note