CVE-2026-121689
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 09, 2026
Vendor
unknown
Description
FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms. The Wi‑Fi PSK is stored in plaintext in wpa_supplicant.conf and is disclosed through unauthenticated API endpoints and diagnostic exports. Additionally, unauthenticated ADB access allows retrieval of the /etc/shadow file.