CVE-2026-121689Not scored
CVE-2026-121689: CVE-2026-121689
FrodoBots · FrodoBots EarthRover Mini+ firmware
No fix listed · Affected: FrodoBots EarthRover Mini+ firmware · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.09 (9 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
No EPSS score yet. The score appears once FIRST publishes it.
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plaintext in wpa_supplicant.conf and is disclosed through unauthenticated API endpoints and diagnostic exports. Additionally, unauthenticated ADB access allows retrieval of the /etc/shadow file.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 10 Nov.
- CERT/CC finds flaws enabling remote root access to FrodoBotsSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.