CVE-2026-121688

UNKNOWN 0.0

CVE-2026-121688

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains an insecure STM32 firmware update mechanism. The STM32 motor‑controller firmware is fetched over unencrypted HTTP. Integrity is validated only via MD5, with the hash provided in the same unprotected response. No code‑signing mechanism is implemented, allowing firmware to be replaced with potentially malicious code.

Vendor	frodobots
Product	frodobots earthrover mini+ firmware
Published	Nov 9, 2026

Stay Ahead of the Next One

Get instant alerts for frodobots frodobots earthrover mini+ firmware

Be the first to know when new unknown vulnerabilities affecting frodobots frodobots earthrover mini+ firmware are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

FrodoBots / FrodoBots EarthRover Mini+ firmware

6.2.4_6.2.5_0.614.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

frodobots.ai: https://www.frodobots.ai/ github.com: https://github.com/frodobots-org kb.cert.org: https://kb.cert.org/vuls/id/188754