CVE-2026-7415CWE-306

Open MQTT orchestration without read/write ACLs in Yarbo robot firmware

Critical · published May 7, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with no topic-level read or write ACLs. Any host on the same network can subscribe to sensitive telemetry topics or publish control messages directly to the robot without authentication or authorization of any kind.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00714 · 53.1th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-05-07T16:11Z
EPSS history
Timeline
  • 07 MAY 16:11Z
    Open MQTT orchestration without read/write ACLs in Yarbo robot firmware
    cvelistv5