Researchers Demonstrate Boeing 737 Avionics Vulnerability via Physical Implant

Researchers from the University of California San Diego and Oberlin College have demonstrated a hardware-based cybersecurity vulnerability in the Boeing 737 that could allow an attacker to manipulate flight controls with a device costing less than $100 and requiring only about 60 seconds of physical access to the aircraft. The findings, presented at the USENIX Security Symposium in Baltimore on August 13, 2026, reveal a potential weakness in the physical and electrical architecture of one of the world's most widely used commercial aircraft.

The attack centers on an unlocked maintenance port located in the 737's Electronics and Equipment bay, accessible from the ground near the nose wheel. Researchers built a coin-sized prototype implant that can be inserted into this port, which provides access to the ARINC 429 data bus linking the Flight Management Computer (FMC) and the Multipurpose Control Display Unit (MCDU) in the cockpit. The FMC manages navigation and autopilot commands, while the MCDU serves as the pilots' interface.

Once connected, the device exploits the legacy bus's electrical characteristics. By driving higher current onto the wiring, the implant can override...