VDB

CVE-2026-121690

CVE-2026-121690 PUBLISHED

Reported by certcc · Published November 9, 2026

FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) executes code with unnecessary privileges. All processes run as root and the system lacks privilege separation. The compromise of any single service results in full administrative control of the device.

EPSS 0.17% · 6.0th percentile

Risk scores

EPSS Score
0.17%
6.0th percentile

Affected products

VendorProductVersions
FrodoBotsFrodoBots EarthRover Mini+ firmware6.2.4_6.2.5_0.614.0
FrodoBotsFrodoBots EarthRover Mini+ firmware6.2.4_6.2.5_0.614.0

Timeline

  • Nov 9, 2026 Coalition ESS Score
  • Nov 9, 2026 CVE Published
  • Nov 9, 2026 PoC Published
  • Nov 9, 2026 CVE Updated
  • Nov 10, 2026 EPSS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2026-121690
vulnetix vdb fixes CVE-2026-121690

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-121690/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›