https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T11:30:20.089186+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-121685 CVE-2026-121685 — CVE-2026-121685 2026-11-14T11:30:20.090967+00:00

Affected: FrodoBots EarthRover Mini+ firmware

FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains multiple sets of hard-coded credentials. These include fleet‑wide credentials, including BasicAuth credentials for an Agora token service, AWS IAM access keys, AWS IoT MQTT credentials, and a Slack incoming webhook URL. These credentials are embedded directly in frodobot.bin and are accessible through static analysis of the publicly downloadable firmware. Extraction requires no special privileges.