CVE-2026-8153

critical · 9.8

OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS.

9.8

CVSS

1.8%

EPSS (exploit prob.)

78th

EPSS percentile

2026-05-08

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

References

https://www.universal-robots.com/developer/communication-protocol/dashboard-server/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-8153