CVE-2026-121689: FrodoBots EarthRover Mini+ firmware vulnerability
Published Nov 9, 2026
·Updated
FrodoBots EarthRover Mini+ firmware (v6.2.46.2.50.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plaintext in wpasupplicant.conf and is disclosed through unauthenticated API endpoints and diagnostic exports. Additionally, unauthenticated ADB access allows retrieval of the /etc/shadow file.
Affected Software
1 affected component
FrodoBots EarthRover Mini+ firmware=v6.2.4_6.2.5_0.614.0
Event History
Nov 9, 2026
CVE Published
via MITRE·04:27 PM
Data Sourced
via MITRE·04:27 PM
DescriptionWeakness
Data Sourced
via NVD·05:17 PM
Description