CyberSecBulletin

UnitreeRobotics vulnerabilities

We track 2 vulnerabilities in UnitreeRobotics products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 26, 2026.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest UnitreeRobotics vulnerabilities

  • 8.8 High severity

    Unitree Go2: Insufficient Verification of Data Authenticity

    CVE-2026-27510UnitreeRobotics

    Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution due to missing integrity protection and validation of user-created programmes. The Android appl

  • 8.0 High severity

    Unitree Go2: Missing Authentication for Critical Functionality

    CVE-2026-27509UnitreeRobotics

    Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actuator/request handled by actuator_manager.py. A network-adjacent, unauthenticated