UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-121689
FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plaintext in wpa_supplicant.conf and is disclosed through unauthenticated API endpoints and diagnostic exports. Additionally, unauthenticated ADB access allows retrieval of the /etc/shadow file.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-11-10T23:33:48.924589+00:00
- Epss score
- 0.00115
- Cve id
- CVE-2026-121689
- First seen by Signal
- 2026-11-09T19:15:57+00:00
- Name
- CVE-2026-121689
- Retrieved at
- 2026-11-10T23:35:17+00:00
- Published at
- 2026-11-09T17:17:17.120
- Last modified
- 2026-11-09T17:17:17.120
- Epss percentile
- 0.01555
Related research
Explore deeper with Ninja Signal's threat intelligence graph