CVE-2026-121686
CVE-2026-121686
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) is vulnerable to unauthenticated, remote code execution via MQTT. A firmware method accepts arbitrary shell commands delivered via Amazon Web Services Internet of Things Message Queuing Telemetry Transport (AWS IoT MQTT) messages and executes them as root. Access is gated only by shared Internet of Things (IoT) credentials, with no per‑device authentication, enabling remote code execution as root across the fleet.
| Vendor | frodobots |
| Product | frodobots earthrover mini+ firmware |
| Published | Nov 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for frodobots frodobots earthrover mini+ firmware
Be the first to know when new unknown vulnerabilities affecting frodobots frodobots earthrover mini+ firmware are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
FrodoBots / FrodoBots EarthRover Mini+ firmware
6.2.4_6.2.5_0.614.0