PT-2026-38458

CVE-2026-7413

Published

2026-05-07

Updated

2026-05-14

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Yarbo version 2.3.9

Description A hidden, persistent backdoor provides remote, unauthenticated or weakly authenticated access to privileged functionality. This backdoor is undocumented, cannot be disabled through user-facing settings, and persists after factory resets and standard firmware updates.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Andreas Makris

Todb

Vendors

Affected products

Weakness enumeration

CWE-912: Hidden Functionality

Related identifiers