CVE-2026-121687

FrodoBots EarthRover Mini+ firmware version 6.2.46.2.50.614.0 contains several local interfaces that are exposed without authentication. 1. HTTP REST API port 80: motor control, telemetry/GPS/IMEI, plaintext WiFi password GET /api/v1/wifi/status, join-arbitrary-WiFi, diagnostic export. 2. ADB...