CVE-2026-14984: Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2
Published Oct 1, 2026
·Updated
Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic.
Affected Software
1 affected component
Teledyne FLIR Aware2<=6.9.0.2
Event History
Oct 1, 2026
CVE Published
via MITRE·07:59 PM
Data Sourced
via MITRE·07:59 PM
DescriptionWeakness
Data Sourced
via NVD·08:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which systems are affected?
Teledyne FLIR PackBot robots running Teledyne FLIR Aware2 versions through 6.9.0.2 are affected.
2
What does an attacker need to exploit this issue?
The attacker is remote and does not need authentication, but must be able to sniff or hijack the relevant network traffic.
3
How can I determine whether my deployment is affected?
Identify whether the robot is a Teledyne FLIR PackBot and check its Aware2 version. Versions through 6.9.0.2 are in scope.