Skip to content
OpenAdvisories

Vendor

Universal Robots

7 known vulnerabilities.

Universal Robots at a glance

Last 12 months
1
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability, 1 critical June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202611
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

URx 2 Universal Robots Robot Controllers CB 2, CB3, e-series 1 UR3, UR5 and UR10 1 Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 1 Universal Robots Robot Controller version CB 3.1, SW Version 3.4.5-100 1 PolyScope 5 1 CB 3.1 SW 0

Latest advisories

  • Critical max 9.8
    ICSA-26-134-17 1 CVE

    Universal Robots Polyscope 5

    Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code.

    Universal Robots
  • Critical
    ICSA-18-191-01 2 CVEs

    Universal Robots Robot Controllers

    Successful exploitation of these vulnerabilities could allow a remote attacker to run arbitrary code on the device.

    Universal Robots
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Critical 9.8
    CVE-2026-8153

    Command injection in Dashboard Server interface

    OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS.

    Universal Robots PolyScope 5
  • Medium 6.8
    CVE-2020-10290

    RVD#1495: Universal Robots URCaps execute with unbounded privileges

    Universal Robots controller execute URCaps (zip files containing Java-powered applications) without any permission restrictions and a wide API that presents many primitives that can compromise the overall robot operations as demonstrated in our video. In our …

    Universal Robots URx
  • High 7.5
    CVE-2020-10267

    RVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versions

    Universal Robots control box CB 3.1 across firmware versions (tested on 1.12.1, 1.12, 1.11 and 1.10) does not encrypt or protect in any way the intellectual property artifacts installed from the UR+ platform of hardware and software components (URCaps). These…

    Universal Robots UR3, UR5 and UR10
  • High 8.8
    CVE-2020-10266

    RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robot

    UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots (e.g. in the UR10), no integrity checks are performed. Moreover, the SDK for making such compo…

    Universal Robots URx
  • Critical 9.4
    CVE-2020-10265

    RVD#1443: UR dashboard server enables unauthenticated remote control of core robot functions

    Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/s…

    Universal Robots Universal Robots Robot Controllers CB 2, CB3, e-series
  • Unscored —
    CVE-2018-10633

    Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow …

    Universal Robots Universal Robots Robot Controller version CB 3.1, SW Version 3.4.5-100
  • Unscored —
    CVE-2018-10635

    In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arb…

    Universal Robots Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100