CVE-20XX-?
agent?

Device CVEs.

Published CVEs that affect device software, ranked by exploit odds.

1 CVEs · updated 2026-11-09 17:25 UTC

Reset all
  1. CVE-2026-121686

    FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) is vulnerable to unauthenticated, remote code execution via MQTT. A firmware method accepts arbitrary shell commands delivered via Amazon Web Services Internet of Things Message Queuing Telemetry Transport (AWS IoT MQTT) messages and executes them as root. Access is gated only by shared Internet of Things (IoT) credentials, with no per‑device authentication, enabling remote code execution as root across the fleet.

    Code execution Device

    unscored No fix listed

CVEs that affect device, sorted by how likely they are to be exploited (EPSS).