Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Yarbo Component: Lawn Mower Firmware Clear all filters
TI-2026-06517 CVE-2026-7414 · GHSA-vw42-99fw-3p5g

Hardcoded credentials in Yarbo robot firmware

Priority HIGH 82

Yarbo firmware v2.3.9 contains hardcoded administrative credentials embedded in the firmware image.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00531 Published 2026-05-07 No fix listed CWE-798
TI-2026-06516 CVE-2026-7413 · GHSA-pq5m-hxx2-xhw5

Persistent undocumented backdoor access in Yarbo robot

Priority HIGH 76

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authenticated) access to privileged functionality.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00577 Published 2026-05-07 No fix listed CWE-912