Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Unitree Component: Go2 Firmware Clear all filters
TI-2026-21914 CVE-2026-27510 · GHSA-c2p8-28pf-f3mr

Unitree Go2 Mobile Program Tampering Enables Root RCE

Priority MEDIUM 62

Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution due to missing integrity protection and validation of u…

CVSS 4.0MEDIUM 6.4 Network No auth User interaction EPSS 0.00445 Published 2026-02-26 No fix listed CWE-345
TI-2026-21913 CVE-2026-27509 · GHSA-hcv4-2wj7-9p5g

Unitree Go2 Missing DDS Authentication Enables Adjacent RCE

Priority HIGH 72

Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actuator/request handled by actuator_manager…

CVSS 4.0HIGH 8.5 Adjacent network No auth User interaction EPSS 0.00646 Published 2026-02-26 No fix listed CWE-306
TI-2025-24557 CVE-2025-35027 · GHSA-27p8-m7h9-xchc

Unitree Multiple Robotic Products Command Injection

Priority HIGH 67

Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability.

CVSS 3.1HIGH 7.3 Adjacent network Low privileges No interaction EPSS 0.02685 Published 2025-09-26 No fix listed CWE-78