PT-2026-140450

CVE-2026-121689

·

Published

2026-11-09

·

Updated

2026-11-09

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

FrodoBots EarthRover Mini+ firmware (v6.2.4 6.2.5 0.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plaintext in wpa supplicant.conf and is disclosed through unauthenticated API endpoints and diagnostic exports. Additionally, unauthenticated ADB access allows retrieval of the /etc/shadow file.
Vendors
Affected products
Related identifiers
CVE-2026-121689
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com