CVE-2026-7415 | The MQTT broker embedded in Yarbo firmware v2.3.9 is configu… | CVSS 9.8 CRITICAL

Description

The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with no topic-level read or write ACLs. Any host on the same network can subscribe to sensitive telemetry topics or publish control messages directly to the robot without authentication or authorization of any kind.

Metadata

CVE ID: CVE-2026-7415
State: PUBLISHED
Assigner: AHA
Reserved: 2026-04-29 13:55 UTC
Published: 2026-05-07 16:11 UTC
Last updated: 2026-05-07 17:04 UTC
Primary CWE: CWE-306
CWE-306 Missing authentication for critical function
Vendor / Product: Yarbo / Firmware
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Yarbo	Firmware	—	0 ≤ 2.3.9

Weakness (CWE)

CWE	Source	Description
CWE-306	cna	CWE-306 Missing authentication for critical function

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (2)