Yadea T5 Electric Bicycle

CISA issued an advisory for CVE-2025-70994 affecting all versions of Yadea T5 Electric Bicycles. The vulnerability involves weak authentication mechanisms that allow local attackers to intercept key fob transmissions and forge signals to unlock and start the bicycle, potentially leading to vehicle theft. The vulnerability has a CVSS score of 7.3 (High). Yadea did not respond to CISA's coordination attempts. Users are advised to use external locking mechanisms and keep systems updated. The vulnerability requires local access and user interaction but does not require privileges.