CVE-2026-55393: Local File Inclusion in Teledyne FLIR Robots running Aware2
Published Oct 1, 2026
·Updated
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to read configuration and security parameters on Teledyne FLIR PackBot and FirstLook robots running this software via path traversal.
Affected Software
2 affected components
Teledyne FLIR Aware2 (PackBot)<=6.9.0.2
Teledyne FLIR Aware2 (FirstLook)<=1.7.9
Event History
Oct 1, 2026
CVE Published
via MITRE·07:59 PM
Data Sourced
via MITRE·07:59 PM
DescriptionWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which systems are affected?
Teledyne FLIR PackBot robots running Aware2 through version 6.9.0.2 and FirstLook robots running Aware2 through version 1.7.9 are affected.
2
Does exploitation require authentication or local access?
No. The issue can be exploited remotely by an unauthenticated attacker through the web interface.
3
What could an attacker access?
An attacker can use path traversal through unvalidated pathnames to read configuration and security parameters.