Yarbo Android/IOS mobile application vulnerabilities

2 known vulnerabilities in Yarbo Android/IOS mobile application from Yarbo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Yarbo Android/IOS mobile application: Missing Authorization

  CVE-2026-7368Jun 12, 2026Yarbo

  The Yarbo cloud does not enforce per-device or per-user authorization. Any client possessing valid credentials, whether the shared hard-coded credentials or legitimate per-user credentials, can subscribe to wildcard topics covering all robots globally, and can

• 9.8 Critical severity

  Yarbo Android/IOS mobile application: Use of Hard-coded Credentials

  CVE-2026-10557Jun 12, 2026Yarbo

  The Yarbo Android and iOS applications contain hard-coded MQTT broker credentials that are identical for all users and all devices. These credentials are embedded in the application binary and are readily extractable via APK decompilation. The credentials prov