Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Go2 Edu Plus Firmware HIGH 7.8
CVE-2026-1442

Since the encryption algorithm used to protect firmware updates is itself encrypted using key material available to an attacker (or anyone paying att…

No fix yet
Fix from $1,950 2026-02-27
Go2 Firmware HIGH 8.8
CVE-2026-27510

Unitree Go2 firmware versions 1.1.7 through 1.1.11, when used with the Unitree Go2 Android application (com.unitree.doggo2), are vulnerable to remote…

Fix: after 1.1.11
Fix from $1,950 2026-02-26
Go2 Firmware HIGH 8.0
CVE-2026-27509

Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDD…

Fix: after 1.1.9
Fix from $1,950 2026-02-26
G1 Firmware HIGH 7.3
CVE-2025-35027

Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability.…

Fix: after 1.4.4
Fix from $1,950 2025-09-26
Go1 Firmware HIGH 8.8
CVE-2025-45466

Unitree Go1 <= Go1_2022_05_11 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext.

No fix yet
Fix from $1,950 2025-07-25
Go1 Firmware HIGH 7.1
CVE-2025-45467

Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Ethernet) implements an insecure …

No fix yet
Fix from $1,950 2025-07-25
Go1 Firmware MEDIUM 6.6
CVE-2025-2894

The Go1 also known as "The World's First Intelligence Bionic Quadruped Robot Companion of Consumer Level," contains an undocumented backdoor that can…

No fix yet
Fix from $1,600 2025-03-28
A1 Firmware HIGH 7.5
CVE-2023-3104

Lack of authentication vulnerability. An unauthenticated local user is able to see through the cameras using the web server due to the lack of any fo…

Mitigation only
Fix from $1,950 2023-11-22
A1 Firmware MEDIUM 5.9
CVE-2023-3103

Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Middle (MITM) attack on the robot…

No fix yet
Fix from $1,600 2023-11-22
Go 1 Firmware MEDIUM 6.5
CVE-2022-2675

Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 (using firmware version 0.1.35) can be powered d…

Fix: 0.1.35+
Fix from $1,600 2022-08-05