Auth bypass in Ghost Robotics Vision 60
CVE-2026-12989
A lack of authentication in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface…
Vulnerability class: Broken Authentication
Affected products
- Ghost Robotics Vision 60 — versions 5.5.0
Weakness classification (CWE)
References
- cve-coordination@incibe.es (patch)