Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Teledyne FLIR Aware2 lets attackers read robot settings

CVE-2026-55393 · published 17 days ago
Summary

The web interface of Teledyne FLIR Aware2 (versions up to 6.9.0.2 for PackBot and 1.7.9 for FirstLook) does not properly check file paths. An outside attacker could use this weakness to view configuration and security information stored on the robot. Update the software to the latest version or apply the vendor's security patch as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
teledyne flir aware2 <= 6.9.0.2
Original advisory text
Local File Inclusion in Teledyne FLIR Robots running Aware2
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to read configuration and security parameters on Teledyne FLIR PackBot and FirstLook robots running this software via path traversal.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
10.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published1 Oct 2026
Updated15 Oct 2026
First seen1 Oct 2026
Sources
CVE-2026-55393 · NVD
CVE-2026-55393 · MITRE
Track software like this
Free during beta