{"id":"CVE-2026-121689","published":"2026-11-09T17:17:17.120","lastModified":"2026-11-09T17:17:17.120","description":"FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plaintext in wpa_supplicant.conf and is disclosed through unauthenticated API endpoints and diagnostic exports. Additionally, unauthenticated ADB access allows retrieval of the /etc/shadow file.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/frodobots-org","tags":[]},{"url":"https://kb.cert.org/vuls/id/188754","tags":[]},{"url":"https://www.frodobots.ai/","tags":[]}],"exploitRefs":[{"url":"https://github.com/frodobots-org","tags":[]}],"hasPoc":true,"ai":null}