Skip to content

CVE-2026-7413

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
May 7, 2026
Last Seen
May 7, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in Yarbo Robot Firmware Expose Devices to Remote Attacks78.0

AHA! disclosed three critical vulnerabilities in Yarbo robot firmware v2.3.9, identified as CVE-2026-7413, CVE-2026-7414, and CVE-2026-7415. The vulnerabilities include a hidden backdoor, hardcoded credentials, and an open MQTT broker, allowing attackers to gain unauthorized access and control over...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

MalwareCVE-2026-7414CVE-2026-7415CWE-798 - Use of Hard-coded CredentialsCWE-306 - Missing Authentication For Critical FunctionT1078 - Valid AccountsT1071 - Application Layer ProtocolT1021 - Remote ServicesMQTT BrokerNAT-punching Proxy