https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:00:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-309069 EUVD-2026-309069 https://cve.radiocsirt.org/vuln/euvd-2026-309069 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7415 <p>The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with no topic-level read or write ACLs. Any host on the same network can subscribe to sensitive telemetry topics or publish control messages directly to the robot without authentication or authorization of any kind.</p> <p>The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with no topic-level read or write ACLs. Any host on the same network can subscribe to sensitive telemetry topics or publish control messages directly to the robot without authentication or authorization of any kind.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-7415 https://cve.radiocsirt.org/vuln/ghsa-5jxr-5v22-49gf <p>The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with no topic-level read or write ACLs. Any host on the same network can subscribe to sensitive telemetry topics or publish control messages directly to the robot without authentication or authorization of any kind.</p> <p>The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with no topic-level read or write ACLs. Any host on the same network can subscribe to sensitive telemetry topics or publish control messages directly to the robot without authentication or authorization of any kind.</p> https://cve.radiocsirt.org/vuln/ghsa-5jxr-5v22-49gf