Skip to content
OpenAdvisories
Critical · 9.4 CVE-2026-14984 EUVD-2026-91049GHSA-qx8v-m72v-pf53

Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2

Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by Mandiant

Description

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic.

Affected products

VendorProductAffectedFixed
Teledyne FLIR Aware2 ≤ 6.9.0.2 —

References