Go2 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-27510 CRITICAL POC Act Now

Remote control vulnerability in Unitree Go2 robot dog firmware 1.1.7-1.1.11. The companion Android app allows remote attackers to take control of the robot. PoC available.

Android Python RCE SQLi Go2 Firmware

NVD

CVSS 3.1

9.6

EPSS

0.1%

CVE-2025-35027 HIGH POC This Month

Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Command Injection G1 Firmware Go2 Firmware H1 Firmware B2 Firmware

NVD GitHub

CVSS 3.1

7.3

EPSS

0.2%

CVE-2026-27510

EPSS 0% CVSS 9.6

CRITICAL POC Act Now

Remote control vulnerability in Unitree Go2 robot dog firmware 1.1.7-1.1.11. The companion Android app allows remote attackers to take control of the robot. PoC available.

Android Python RCE +2

NVD

CVE-2025-35027

EPSS 0% CVSS 7.3

HIGH POC This Month

Command Injection G1 Firmware Go2 Firmware +2

NVD GitHub