CVE-2026-14983: Missing Authentication in Teledyne FLIR Robots running Aware2
Published Oct 1, 2026
·Updated
Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to achieve denial of service against Teledyne FLIR PackBot robots running this software via misuse of the reboot endpoint.
Affected Software
1 affected component
Teledyne FLIR Aware2<=6.9.0.2
Event History
Oct 1, 2026
CVE Published
via MITRE·07:59 PM
Data Sourced
via MITRE·07:59 PM
DescriptionWeakness
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are exposed to this issue?
Teledyne FLIR PackBot robots running Teledyne FLIR Aware2 through version 6.9.0.2 are affected. Exposure requires the Aware2 web interface to be reachable by a remote attacker.
2
What does an attacker need to exploit the vulnerability?
An attacker does not need to authenticate to the Aware2 web interface. They can misuse the reboot endpoint remotely to cause a denial of service.
3
What is the practical impact of exploitation?
Exploitation can reboot the affected PackBot robot, resulting in denial of service. The provided information does not describe impacts beyond denial of service.