CVE-2026-4648

This CVE documents the compromise of a live payment system at Resurrection Fest in Spain, using MIFARE Classic NFC wristbands for identity verification, physical access control, and financial transactions. The critical thing to understand is that this is not a novel vulnerability—MIFARE Classic's CRYPTO1 cipher has been broken since 2008-2009, when academic researchers published detailed analyses exposing the architectural flaws that enable nested authentication attacks. The technique used here, a refined 'backdoor nested attack,' is a direct descendant of attacks that have been publicly available for over fifteen years. What makes this significant is the deployment context. These wristbands were not performing a single function—they multiplexed identity verification, physical access to festival areas, and stored monetary value simultaneously, all from a commodity NFC chip worn continuously by attendees in a dense, crowded environment. The attacker's operational cost is minimal: $30 of NFC hardware and publicly available tools. The detection window, however, is massive—unlike credit card fraud which triggers within minutes through velocity rules and zero-liability policies, festival wristband clones operate for days with no real-time anomaly detection and no separate verification device. The uncomfortable reality is that NXP Semiconductor continues to actively manufacture and sell the FM11RF08S, the chip at the heart of this system. There is no regulatory prohibition on selling known-vulnerable cryptographic hardware into non-PCI-DSS payment contexts. Festival cashless systems fall into a compliance gap—PCI-DSS covers card-not-present transactions but does not explicitly address this category of embedded payment deployment. This is not merely a vendor failure; it is a structural gap where the economics of low-margin event services, default-to-cheapest-component procurement, and absent regulatory definition combine to make compromised cryptography the rational default. If you are responsible for evaluating or procuring payment systems, verify that the underlying ICs use contemporary cryptography (AES-128 based equivalents like MIFARE Desfire or equivalent). Reject any deployment that multiplexes identity, access, and payment functions on a single legacy NFC chip. Demand explicit cryptographic pedigree documentation from vendors, not just 'industry-standard' assurances. If your event vendor cannot produce a cryptographer-reviewed design, the risk calculus is not ambiguous—it is a known-vulnerable system operating in an unsupervised detection environment.

Reviewed through automated stages and approved by a human before publication.