CVE-2026-121685

UNKNOWN 0.0

CVE-2026-121685

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains multiple sets of hard-coded credentials. These include fleet‑wide credentials, including BasicAuth credentials for an Agora token service, AWS IAM access keys, AWS IoT MQTT credentials, and a Slack incoming webhook URL. These credentials are embedded directly in frodobot.bin and are accessible through static analysis of the publicly downloadable firmware. Extraction requires no special privileges.

Vendor	frodobots
Product	frodobots earthrover mini+ firmware
Published	Nov 9, 2026

Stay Ahead of the Next One

Get instant alerts for frodobots frodobots earthrover mini+ firmware

Be the first to know when new unknown vulnerabilities affecting frodobots frodobots earthrover mini+ firmware are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

FrodoBots / FrodoBots EarthRover Mini+ firmware

6.2.4_6.2.5_0.614.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

frodobots.ai: https://www.frodobots.ai/ github.com: https://github.com/frodobots-org kb.cert.org: https://kb.cert.org/vuls/id/188754