https://vulnogram.org/ Most recent CVEs assigned by Teradyne Robotics (tro). https://vulnogram.org/seaview/icons/tro.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-8153 https://vulnogram.org/CVE-2026-8153 OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS. Critical Network Exploitable Fri, 08 May 2026 11:45:18 GMT https://vulnogram.org/CVE-2025-13819 https://vulnogram.org/CVE-2025-13819 Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks. Medium Network Exploitable Mon, 01 Dec 2025 09:41:08 GMT https://vulnogram.org/CVE-2025-9229 https://vulnogram.org/CVE-2025-9229 Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose error pages. Medium Network Exploitable Wed, 20 Aug 2025 08:36:57 GMT https://vulnogram.org/CVE-2025-9228 https://vulnogram.org/CVE-2025-9228 MiR software versions prior to version 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes which are intended only for administrative users. Medium Wed, 20 Aug 2025 08:24:33 GMT https://vulnogram.org/CVE-2025-9225 https://vulnogram.org/CVE-2025-9225 Stored cross-site scripting (XSS) in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim’s browser Medium Wed, 20 Aug 2025 07:26:01 GMT https://vulnogram.org/CVE-2025-8749 https://vulnogram.org/CVE-2025-8749 Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots (MiR) Software Versions prior to 3.0.0 on MiR Robots allows authenticated users to extract files from the robot file system via a crafted API request. Medium Fri, 08 Aug 2025 11:46:16 GMT https://vulnogram.org/CVE-2025-8748 https://vulnogram.org/CVE-2025-8748 MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the underlying operating system. High Fri, 08 Aug 2025 11:09:17 GMT