VU#188754: FrodoBots EarthRover Mini+ firmware contains multiple vulnerabilities
2026-11-09T20:52:00Z•99ea38b3fef85308279237be0eb0a2f1429d83a18a58620c5d0db6ad6a27f915
CVE-2026-109618CVE-2026-109619CVE-2026-121685CVE-2026-16305CVE-2026-16306CVE-2026-91141AndroidCERT/CCIoTPACSPHPPrestaShoparbitrary-code-executionauthentication-bypassautomotivecryptographydenial-of-servicehardcoded-credentialshealthcarememory-corruptionremote-code-executionsensitive-data-exposureuse-after-freevsomeip
What happened
CERT/CC advisories describe multiple vulnerabilities across consumer IoT, e-commerce, mobile, healthcare, automotive middleware, PHP, and authentication systems. Impacts include unauthenticated remote code execution, arbitrary code execution, credential exposure, authentication bypass, sensitive-data disclosure, device takeover, and denial of service. Several entries provide CVE identifiers and fixed versions, while one advisory is explicitly retracted as invalid.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- certcc_vulnotes
- Record identifier
- 99ea38b3fef85308279237be0eb0a2f1429d83a18a58620c5d0db6ad6a27f915
- Enrichment time
- 2026-11-09T20:52:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.