CVE-20XX-?
agent?

Critical, and still unpatched.

Critical-severity CVEs with no patch or advisory linked yet. These are the ones to watch.

1 CVEs · updated 2026-11-13 03:55 UTC

Reset all
  1. CVE-2026-121686

    FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) is vulnerable to unauthenticated, remote code execution via MQTT. A firmware method accepts arbitrary shell commands delivered via Amazon Web Services Internet of Things Message Queuing Telemetry Transport (AWS IoT MQTT) messages and executes them as root. Access is gated only by shared Internet of Things (IoT) credentials, with no per‑device authentication, enabling remote code execution as root across the fleet.

    Code execution Device

    9.8 CRITICAL 0.4% exploit odds No fix listed

Critical CVEs are vulnerabilities scored 9.0 or higher on the CVSS scale. This list shows the ones with no patch or vendor advisory linked yet, ranked by how likely they are to be exploited (EPSS).