Informed parties: RTX Corporation and Department of Defense Cyber Crime Center (on September 21, 2025)

Using the credentials test:test, it was possible to log in at the ARINC OpCenter Message Browser (Screenshot) as U.S. Navy Fleet Logistics Support Wing.

Via this web service, text messages can be sent to the cockpit. For obvious reasons, we did not try that. Sent messages could be viewed.

Unfortunately, RTX did not respond to our vulnerability report. The account was disabled.