unitree
Security Risk Profile
58
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 14 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 5, 2022 to present
14
Total CVEs
8
Critical+High
0
Exploited
6
Unpatched
Threat Assessment
Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
6
Critical/High
Risk Level
58/100
medium
Severity Distribution
Critical
0High
8Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
OS Command Injection
2
2
Command Injection
2
3
SQL Injection
1
Most Affected Products
1. Unitree Go25
2. Unitree Go2 firmware5
3. Unitree G14
4. Unitree H14
5. Unitree B24
Recent Vulnerabilities
See more →CVE-2026-1442
CVSS 7.8high
Unitree UPK files Hard-Coded Key
2/27/2026🔧 No Patch
https://reddit.com/r/netsec/comments/1rfjjfc/from_dds_packets_to_robot_shells_two_rces_in/
unknown
From DDS Packets to Robot Shells: Two RCEs in Unitree Robots (CVE-2026-27509 & CVE-2026-27510)
2/26/2026🔧 No Patch
CVE-2026-27510
CVSS 6.4EPSS 0%medium
Unitree Go2 Mobile Program Tampering Enables Root RCE
2/26/2026🔧 No Patch
CVE-2026-27509
CVSS 8.5EPSS 0%high
Unitree Go2 Missing DDS Authentication Enables Adjacent RCE
2/26/2026🔧 No Patch
CVE-2025-35027
CVSS 7.3high
Unitree Multiple Robotic Products Command Injection
9/26/2025🔧 No Patch
CVE-2025-60250
CVSS 4.7medium
9/26/2025🔧 No Patch
CVE-2025-60251
CVSS 5.0medium
9/26/2025🔧 No Patch
CVE-2025-60017
CVSS 8.2high
9/26/2025🔧 No Patch
CVE-2025-45467
CVSS 7.1high
7/25/2025🔧 No Patch
CVE-2025-45466
CVSS 8.8high
7/25/2025🔧 No Patch
Monitor unitree in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.