CVE-2026-27509 — Remote Code Execution in Unitree Go2+1

Back Dbugs.Ptsecurity

CVE-2026-27509 — Remote Code Execution in Unitree Go2+1

Dbugs.Ptsecurity • February 28, 2026

Share: View original

Description The firmware does not implement DDS authentication or authorization for the Eclipse CycloneDDS topic ''rt/api/programming ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Remote Code Execution Vulnerabilities in Unitree Go2 Robot Two critical vulnerabilities, CVE-2026-27509 and CVE-2026-27510, were identified in the Unitree Go2 robot. CVE-2026-27509 allows unauthenticated remote code execution via DDS, while CVE-2026-27510 involves mobile database tampering leading to remote code execution. Both vulnerabilities were published on 2026-02-26. 2 sources 71

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)