Unitree Go2 Robot RCE (CVE-2026-27509 & CVE-2026-27510)

Back Boschko.Ca

Unitree Go2 Robot RCE (CVE-2026-27509 & CVE-2026-27510)

Boschko.Ca • February 27, 2026

Share: View original

CVE-2026-27509 Unauthenticated DDS-Based Remote Code Execution & CVE-2026-27510 Mobile Database Tampering Leading to Remote Code Execution .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Remote Code Execution Vulnerabilities in Unitree Go2 Robot Two critical vulnerabilities, CVE-2026-27509 and CVE-2026-27510, were identified in the Unitree Go2 robot. CVE-2026-27509 allows unauthenticated remote code execution via DDS, while CVE-2026-27510 involves mobile database tampering leading to remote code execution. Both vulnerabilities were published on 2026-02-26. 2 sources 71

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (2)

CVE-2026-27509 CVE-2026-27510