The vulnerability identified as CVE-2026-14983 involves missing authentication controls in the web interface of Teledyne FLIR Aware2 software versions through 6.9.0.2. Specifically, the reboot endpoint can be accessed without authentication, enabling remote attackers to trigger a denial of service condition by rebooting Teledyne FLIR PackBot robots running this software. The CVSS 4.0 base score is 7.1, indicating a high severity with attack vector as adjacent network, low attack complexity, no privileges required, no user interaction, and high impact on availability.

Remote unauthenticated attackers can cause denial of service by rebooting affected devices, disrupting the operation of Teledyne FLIR PackBot robots. There is no indication of confidentiality or integrity impact. No known exploits are reported in the wild.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the web interface to trusted users and networks to prevent unauthorized access to the reboot endpoint.