Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-8153

Command injection in Dashboard Server interface

Description

OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Universal Robots PolyScope 5

Default version status: unaffected

  • 0 to < 5.25.1affected

References