Unrated severityNVD Advisory· Published Nov 9, 2026
CVE-2026-121689
CVE-2026-121689
Description
FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plaintext in wpa_supplicant.conf and is disclosed through unauthenticated API endpoints and diagnostic exports. Additionally, unauthenticated ADB access allows retrieval of the /etc/shadow file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 6.2.4_6.2.5_0.614.0
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.