CVE-2026-4648: CasfID NFC Wristband Cryptographic Flaw

CVE-2026-4648 Overview

CVE-2026-4648 is a cryptographic weakness in the cashless payment system based on Near Field Communication (NFC) wristbands supplied by CasfID Servicios Tecnológicos S.L.U. The affected deployment was used at Resurrection Fest 2025 and relies on MIFARE Classic (FM11RF08S) contactless cards. The authentication scheme is vulnerable to the Backdoored Nested Attack, which recovers card sector keys. An attacker with physical proximity can then read the wristband contents and clone credentials to a rewritable, compatible card. The flaw is tracked under CWE-326: Inadequate Encryption Strength.

Critical Impact
Successful exploitation allows attendee impersonation, fraudulent use of stored wristband balances, and financial losses to both users and event organizers.

Affected Products

CasfID Servicios Tecnológicos S.L.U. cashless payment system (version deployed at Resurrection Fest 2025)
NFC wristbands based on MIFARE Classic FM11RF08S chips
Compatible rewritable MIFARE Classic cards used within the payment ecosystem

Discovery Timeline

2026-07-28 - CVE-2026-4648 published to the National Vulnerability Database (NVD)
2026-07-28 - Last updated in NVD database

Technical Details for CVE-2026-4648

Vulnerability Analysis

The CasfID cashless payment system authenticates wristbands using the proprietary Crypto-1 algorithm implemented on MIFARE Classic FM11RF08S chips. Crypto-1 has documented cryptographic weaknesses that permit key recovery through nested authentication attacks. The FM11RF08S variant is specifically susceptible to the Backdoored Nested Attack, which leverages a hardware-level static nonce backdoor to accelerate key extraction. Once sector keys are retrieved, an attacker reads the wristband dump in full and writes it to a compatible rewritable card. The cloned credential is indistinguishable from the original during transaction terminals' authentication phase. This breaks the confidentiality and integrity assumptions that the payment workflow places on the token.

Root Cause

The root cause is the use of an insecure cryptographic algorithm for wristband authentication [CWE-326]. Crypto-1 offers insufficient key strength, and the FM11RF08S implementation contains a static nonce backdoor that undermines the nested authentication protocol. The system inherits these weaknesses by relying on MIFARE Classic as the sole authentication factor for stored-value operations.

Attack Vector

Exploitation requires physical proximity to a target wristband within NFC read range, typically a few centimeters. The attacker uses an NFC reader such as a Proxmark3 or an Android device with an NFC controller to execute the Backdoored Nested Attack against the wristband. After recovering sector keys, the attacker dumps the wristband contents and clones them to a blank, writable MIFARE Classic-compatible card (often a "magic" card). The cloned card is then presented at payment terminals in place of the legitimate wristband.

No verified public exploit code is published for this specific deployment. See the INCIBE Security Notice for the coordinated advisory.

Detection Methods for CVE-2026-4648

Indicators of Compromise

Duplicate wristband unique identifier (UID) transactions occurring within short intervals at geographically separated point-of-sale terminals.
Balance decrements or top-ups on a wristband while the legitimate holder reports no recent activity.
Transactions originating from card UIDs known to be associated with rewritable "magic" MIFARE Classic cards.

Detection Strategies

Correlate transaction logs by wristband UID across terminals to identify impossible-travel patterns between vendor stalls.
Monitor for anomalous read failures, repeated authentication attempts, or nonce collisions that may indicate active nested attacks against wristbands.
Flag transactions where the card's Answer To Request (ATQA), Select Acknowledge (SAK), or block-0 signature deviates from the genuine FM11RF08S profile issued by the operator.

Monitoring Recommendations

Centralize point-of-sale telemetry into a security data lake and build velocity and geolocation rules against wristband UIDs.
Alert on cumulative daily spend or top-up thresholds per UID that exceed expected attendee behavior baselines.
Retain full NFC transaction traces, including UID, sector access patterns, and terminal ID, for post-event fraud reconciliation.

How to Mitigate CVE-2026-4648

Immediate Actions Required

Contact CasfID Servicios Tecnológicos S.L.U. for the remediation plan referenced in the INCIBE advisory before reusing the platform at future events.
Migrate wristband issuance to cards using modern authentication such as MIFARE DESFire EV3 with AES-128 or equivalent secure elements.
Bind stored balances to a server-side ledger keyed by cryptographic wristband identifiers rather than trusting on-card balance data.

Patch Information

No vendor patch identifier is published in the NVD entry. The coordinated disclosure is documented in the INCIBE-CERT security notice. Event organizers should request written confirmation from CasfID that the deployed card technology and authentication algorithm have been replaced before subsequent events.

Workarounds

Enforce server-side balance authoritative accounting so cloned wristbands cannot spend more than the legitimate balance recorded centrally.
Rate-limit transactions per UID and require operator intervention when spend velocity or geographic dispersion exceeds thresholds.
Physically inspect wristbands at entry and use tamper-evident bands to reduce opportunistic skimming windows.

bash

# Example server-side velocity rule (pseudo-configuration)
transaction_rules:
  - name: uid_impossible_travel
    match:
      field: wristband_uid
    window_seconds: 60
    max_distinct_terminals: 2
    action: block_and_alert
  - name: uid_daily_spend_cap
    match:
      field: wristband_uid
    window_seconds: 86400
    max_amount_eur: 200
    action: require_operator_review