Skip to content

Vendor

UnitreeRobotics vulnerabilities

2 published CVES affecting UnitreeRobotics, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of UnitreeRobotics alerts

Products

Latest UnitreeRobotics CVEs

Newest publication first

  1. CVE-2026-27510 Unitree Go2 Mobile Program Tampering Enables Root RCE

    Published
    MediumCVSS 6.4 EPSS 0.45%

    Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote code execution due to missing integrity protection and validation of user-created programmes. The Android application stores progr...

  2. CVE-2026-27509 Unitree Go2 Missing DDS Authentication Enables Adjacent RCE

    Published
    HighCVSS 8.5 EPSS 0.65%

    Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/programming_actuator/request handled by actuator_manager.py. A network-adjacent, unauthenticated attacker can join D...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.