Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-7368

The Yarbo cloud does not enforce per-device or per-user authorization. Any client possessing valid credentials, whether the shared hard-coded credentials or legitimate per-user credentials, can subscribe to wildcard topics covering all robots globally, and can publish to any robot's command topic using only the robot's serial number (disclosed in the telemetry stream). Even after removal of hard-coded credentials from the app, a single compromised credential could still provide fleet-wide access
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:47f56d967d3a05bc49dda489de344c9891982df9269587320aee15f1348379c6
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
2

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Yarbo Android/IOS mobile application","vendor":"Yarbo","versions":[{"lessThan":"3.17.4","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:133628797f240d5b6900d76156feca403628c7f0027604395d943db0dc9518bb · sha256:b5ae7aab323a3124… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"Yarbo Cloud MQTT infrastructure","vendor":"Yarbo","versions":[{"status":"affected","version":"All","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:133628797f240d5b6900d76156feca403628c7f0027604395d943db0dc9518bb · sha256:b5ae7aab323a3124… · /containers/cna/affected/1
cvss · 2 assertions

{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.6,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"H…

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:133628797f240d5b6900d76156feca403628c7f0027604395d943db0dc9518bb · sha256:b5ae7aab323a3124… · /containers/cna/metrics/0/cvssV4_0

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:133628797f240d5b6900d76156feca403628c7f0027604395d943db0dc9518bb · sha256:b5ae7aab323a3124… · /containers/cna/metrics/1/cvssV3_1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Yarbo Android/IOS mobile application","vendor":"Yarbo","versions":[{"lessThan":"3.17.4","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:133628797f240d5b6900d76156feca403628c7f0027604395d943db0dc9518bb · sha256:b5ae7aab323a3124… · /containers/cna/affected/0
{"defaultStatus":"unaffected","product":"Yarbo Cloud MQTT infrastructure","vendor":"Yarbo","versions":[{"status":"affected","version":"All","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:133628797f240d5b6900d76156feca403628c7f0027604395d943db0dc9518bb · sha256:b5ae7aab323a3124… · /containers/cna/affected/1

Provider-owned CVSS observations

2 source assertions
{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.6,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"H…
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:133628797f240d5b6900d76156feca403628c7f0027604395d943db0dc9518bb · sha256:b5ae7aab323a3124… · /containers/cna/metrics/0/cvssV4_0
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:133628797f240d5b6900d76156feca403628c7f0027604395d943db0dc9518bb · sha256:b5ae7aab323a3124… · /containers/cna/metrics/1/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-862","description":"CWE-862 Missing Authorization","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:133628797f240d5b6900d76156feca403628c7f0027604395d943db0dc9518bb · sha256:b5ae7aab323a3124… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions
{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-162-01.json"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:133628797f240d5b6900d76156feca403628c7f0027604395d943db0dc9518bb · sha256:b5ae7aab323a3124… · /containers/cna/references/1
{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-01"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:133628797f240d5b6900d76156feca403628c7f0027604395d943db0dc9518bb · sha256:b5ae7aab323a3124… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer