CVE-2026-8153CWE-78

Command injection in Dashboard Server interface

Critical · published May 8, 2026

CVSS v3.1
9.8
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02990 · 87.2th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-05-08T11:45Z
EPSS history
Timeline
  • 08 MAY 11:45Z
    Command injection in Dashboard Server interface
    cvelistv5