CVE-2026-121686

FrodoBots EarthRover Mini+ firmware version 6.2.46.2.50.614.0 is vulnerable to unauthenticated, remote code execution via MQTT. A firmware method accepts arbitrary shell commands delivered via Amazon Web Services Internet of Things Message Queuing Telemetry Transport AWS IoT MQTT messages and...