Frodobots

6 CVEs in 1 Frodobots product, including Frodobots Earthrover Mini+ Firmware. Newest: CVE-2026-121690 (2026-11-09).

Frodobots products with known CVEs

ProductCVEs
Frodobots Earthrover Mini+ Firmware6
Frodobots CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1216902026-11-09FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) executes code with unnecessary privileges. All processes run as root and the system lacks pri…
CVE-2026-1216892026-11-09FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plain…
CVE-2026-1216882026-11-09FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains an insecure STM32 firmware update mechanism. The STM32 motor‑controller firmware is…
CVE-2026-1216872026-11-09FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains several local interfaces that are exposed without authentication. 1. HTTP REST API…
CVE-2026-1216862026-11-09FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) is vulnerable to unauthenticated, remote code execution via MQTT. A firmware method accepts a…
CVE-2026-1216852026-11-09FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains multiple sets of hard-coded credentials. These include fleet‑wide credentials, inclu…