79805 matches found
CVE-2026-84410
In apport before 2.37.0, an improper privilege management vulnerability allows an unprivileged local attacker to gain root privileges on systems where automatic crash reporting is enabled. The automatic crash report processing pipeline runs as root and executes ldd on the attacker-controlled...
CVE-2026-121690
The FrodoBots EarthRover Mini+ (firmware version 6.2.4_6.2.5_0.614.0 ) is vulnerable to a privilege escalation issue where the system lacks proper privilege separation . All processes execute with root privileges, meaning the compromise of any single service leads to full administrative control o...
CVE-2026-121687
The FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0 ) exposes several local interfaces without authentication, potentially allowing full local compromise. Vulnerable components include an HTTP REST API on port 80 (providing motor control, telemetry, and plaintext Wi-Fi passwords)...
CVE-2026-121686
The FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0 ) is vulnerable to unauthenticated remote code execution (RCE) as root. A firmware method accepts arbitrary shell commands delivered via AWS IoT MQTT messages. This vulnerability exists because access is gated only by shared IoT...
ROOT-APP-PYPI-CVE-2025-69223 CVE-2025-69223 in aiohttp - Patched by Root
Root has patched CVE-2025-69223 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-69227 CVE-2025-69227 in aiohttp - Patched by Root
Root has patched CVE-2025-69227 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-69226 CVE-2025-69226 in aiohttp - Patched by Root
Root has patched CVE-2025-69226 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
EUVD-2026-120095
FrodoBots EarthRover Mini+ firmware version 6.2.46.2.50.614.0 executes code with unnecessary privileges. All processes run as root and the system lacks privilege separation. The compromise of any single service results in full administrative control of the device...
EUVD-2026-120092
FrodoBots EarthRover Mini+ firmware version 6.2.46.2.50.614.0 contains several local interfaces that are exposed without authentication. 1. HTTP REST API port 80: motor control, telemetry/GPS/IMEI, plaintext WiFi password GET /api/v1/wifi/status, join-arbitrary-WiFi, diagnostic export. 2. ADB...
EUVD-2026-120091
FrodoBots EarthRover Mini+ firmware version 6.2.46.2.50.614.0 is vulnerable to unauthenticated, remote code execution via MQTT. A firmware method accepts arbitrary shell commands delivered via Amazon Web Services Internet of Things Message Queuing Telemetry Transport AWS IoT MQTT messages and...
ROOT-APP-PYPI-CVE-2026-49855 CVE-2026-49855 in tornado - Patched by Root
Root has patched CVE-2026-49855 in the tornado package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54277 CVE-2026-54277 in aiohttp - Patched by Root
Root has patched CVE-2026-54277 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54273 CVE-2026-54273 in aiohttp - Patched by Root
Root has patched CVE-2026-54273 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-50269 CVE-2026-50269 in aiohttp - Patched by Root
Root has patched CVE-2026-50269 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34515 CVE-2026-34515 in aiohttp - Patched by Root
Root has patched CVE-2026-34515 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-54275 CVE-2026-54275 in aiohttp - Patched by Root
Root has patched CVE-2026-54275 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34514 CVE-2026-34514 in aiohttp - Patched by Root
Root has patched CVE-2026-34514 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34525 CVE-2026-34525 in aiohttp - Patched by Root
Root has patched CVE-2026-34525 in the aiohttp package for Root:PyPI. Multiple fixed versions available...