Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Medium | 6.3 | CVE-2026-115996 |
A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1
Unitree RoboticsUnitree Robotics Unitree Go2
|
NVD | |||
|
CVE-2026-115996A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1
Executive summaryA vulnerability in the Unitree Go2 robot dog's chat component, affecting versions up to 1.1.13, 1.1.14.1, and 1.1.15.1, allows improper certificate validation. The advisory does not state a severity score, and it does not state a fix or recommended action from the vendor beyond confirming the issue was previously reported internally. Technical summaryThe flaw is improper certificate validation (CWE-295) in the WebSocketClient.connect function of websocket.py in the chat_go component, so the client does not properly verify the server's TLS certificate. The advisory says the attack may be initiated remotely, with high attack complexity and difficult exploitability. Affected versions are stated as up to 1.1.13/1.1.14.1/1.1.15.1, and a fixed version is not stated. A workaround is not stated, and detection guidance is not stated. The vendor quote references an internal ticket and submission number but gives no remediation details. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploitedConfidentialityNone IntegrityLow AvailabilityNone
How it is exploited
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Critical | 9.4 | CVE-2026-115995 |
A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4
Unitree RoboticsUnitree Robotics Unitree Go2
|
NVD | |||
|
CVE-2026-115995A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4
Executive summaryUnitree Robotics' Unitree Go2 robot, in versions up to 1.1.11.4, contains a vulnerability that can be exploited remotely. The advisory does not state a severity score, but it recommends upgrading to version 1.1.11.5 to resolve the issue. Technical summaryThe flaw is an OS command injection (CWE-78) in the set_volume function of gpt_thread.py in the chat_go component, triggered by manipulating the Value argument. The advisory says the attack can be launched remotely. The advisory does not state the specific preconditions, authentication requirements, or whether exploitation has occurred in the wild. The fixed version is 1.1.11.5, and the advisory says upgrading the affected component is sufficient. No workarounds or detection guidance are stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||