CVE-2026-8153

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-8153
OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.universal-robots.com/developer/communication-protocol/dashboard-server/
Configurations

No configuration.

History

11 May 2026, 10:16

Type Values Removed Values Added
Summary (en) OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.21.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS. (en) OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS.

08 May 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-08 12:16

Updated : 2026-05-11 10:16

NVD link : CVE-2026-8153

Mitre link : CVE-2026-8153

CVE.ORG link : CVE-2026-8153

JSON object : View

Products Affected

No product.

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')