Skip to content
OpenAdvisories

Vendor

Yarbo

5 known vulnerabilities.

Products

Firmware 3 Yarbo Android/IOS mobile application 2 Yarbo Cloud MQTT infrastructure 2 Android/IOS mobile application 0 Cloud MQTT infrastructure 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-7368

    Yarbo Android/iOS Mobile Application and Cloud Infrastructure Missing Authorization

    The Yarbo cloud does not enforce per-device or per-user authorization. Any client possessing valid credentials, whether the shared hard-coded credentials or legitimate per-user credentials, can subscribe to wildcard topics covering all robots globally, and ca…

    Yarbo Yarbo Cloud MQTT infrastructure Yarbo Android/IOS mobile application Android iOS
  • High 7.2
    CVE-2026-7413

    Persistent undocumented backdoor access in Yarbo robot

    A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authenticated) access to privileged functionality. The backdoor is undocumented, cannot be disabled via user-facing settings, and survives factor…

    Yarbo Firmware