Skip to content

CVE-2026-7414

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
May 7, 2026
Last Seen
May 7, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in Yarbo Robot Firmware Expose Devices to Remote Attacks78.0

AHA! disclosed three critical vulnerabilities in Yarbo robot firmware v2.3.9, identified as CVE-2026-7413, CVE-2026-7414, and CVE-2026-7415. The vulnerabilities include a hidden backdoor, hardcoded credentials, and an open MQTT broker, allowing attackers to gain unauthorized access and control over...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

MalwareData BreachCVE-2026-7413CVE-2026-7415CWE-306 - Missing Authentication For Critical FunctionCWE-798 - Use of Hard-coded CredentialsT1078 - Valid AccountsT1021 - Remote ServicesT1059 - Command and Scripting InterpreterT1071 - Application Layer ProtocolT1543.003 - Windows ServiceMQTT Broker