CVE-2026-121690: FrodoBots EarthRover Mini+ firmware vulnerability
Published Nov 9, 2026
·Updated
FrodoBots EarthRover Mini+ firmware (version 6.2.46.2.50.614.0) executes code with unnecessary privileges. All processes run as root and the system lacks privilege separation. The compromise of any single service results in full administrative control of the device.
Affected Software
1 affected component
FrodoBots EarthRover Mini+ firmware=6.2.4_6.2.5_0.614.0
Event History
Nov 9, 2026
CVE Published
via MITRE·04:31 PM
Data Sourced
via MITRE·04:31 PM
DescriptionWeakness
Data Sourced
via NVD·05:17 PM
Description
Frequently Asked Questions
1
What does an attacker need to gain full administrative control of the device?
An attacker needs to compromise any single service on the device. Because all processes run as root and there is no privilege separation, that compromise results in full administrative control.
2
Are only specific services affected?
No. The firmware design runs all processes as root, so compromise of any service can provide device-wide administrative control.
3
Which firmware version is identified as affected?
The affected firmware version identified is 6.2.4_6.2.5_0.614.0.