What is GHSA-wqmw-p848-wf94?

GHSA-wqmw-p848-wf94 is a security advisory published by GitHub Security Advisories with Critical severity. FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains several local...

Which CVE IDs does GHSA-wqmw-p848-wf94 cover?

GHSA-wqmw-p848-wf94 covers the following CVE IDs: CVE-2026-121687. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wqmw-p848-wf94?

GHSA-wqmw-p848-wf94 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-wqmw-p848-wf94CriticalCVSS 9.8

FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains several local...

Vendor

GitHub Security Advisories

Published

November 9, 2026

Last Modified

November 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-121687 →

📋 Description

FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains several local interfaces that are exposed without authentication.

HTTP REST API (port 80): motor control, telemetry/GPS/IMEI, plaintext WiFi password (GET /api/v1/wifi/status), join-arbitrary-WiFi, diagnostic export.
ADB (Android Debug Bridge, port 5555) access to root shell
SSH (port 22)

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-121687
https://github.com/frodobots-org
https://kb.cert.org/vuls/id/188754
https://www.frodobots.ai
https://github.com/advisories/GHSA-wqmw-p848-wf94