Yarbo

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yarbo records in CISA KEV

No Yarbo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lawn Mower Firmware 3 records HIGH Lawn Mower Pro Firmware 3 records HIGH

Records

3 records in Lawn Mower Pro Firmware · all components

TI-2026-06518 CVE-2026-7415 · GHSA-5jxr-5v22-49gf

Open MQTT orchestration without read/write ACLs in Yarbo robot firmware

HIGH 82

The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with no topic-level read or write ACLs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00544 Published 2026-05-07 No fix listed CWE-306

TI-2026-06517 CVE-2026-7414 · GHSA-vw42-99fw-3p5g

Hardcoded credentials in Yarbo robot firmware

HIGH 82

Yarbo firmware v2.3.9 contains hardcoded administrative credentials embedded in the firmware image.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00531 Published 2026-05-07 No fix listed CWE-798

TI-2026-06516 CVE-2026-7413 · GHSA-pq5m-hxx2-xhw5

Persistent undocumented backdoor access in Yarbo robot

HIGH 76

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authenticated) access to privileged functionality.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00577 Published 2026-05-07 No fix listed CWE-912

Open these records in search →

Critical	4
High	1
Medium	0
Low	0
No CVSS	0