CVE-2026-121687

The FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0 ) exposes several local interfaces without authentication, potentially allowing full local compromise. Vulnerable components include an HTTP REST API on port 80 (providing motor control, telemetry, and plaintext Wi-Fi passwords)...