Threat database

CVE-2026-55396 is a high-severity vulnerability in Teledyne FLIR Aware2 software affecting PackBot and FirstLook robots. The issue involves cleartext transmission of sensitive operator control traffic over UDP without cryptographic integrity checks. This allows adjacent unauthenticated attackers to intercept, hijack, or modify control communications by sniffing or hijacking network traffic. The vulnerability affects versions up to 6.9.0.2 for PackBot and up to 1.7.9 for FirstLook. No patch or remediation information is provided in the available data.

CVE-2026-55395 is a critical vulnerability in Teledyne FLIR Aware2 software versions up to 6.9.0.2 (PackBot) and 1.7.9 (FirstLook). It involves the use of hardcoded passwords in the access control mechanism, allowing remote unauthenticated attackers to access and reconfigure affected robots by extracting these credentials from firmware or documentation.

Teledyne FLIR Aware2 versions up to 6.9.0.2 transmit sensitive session information over unencrypted 802.11 wireless networks. This allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic to Teledyne FLIR PackBot robots by sniffing or hijacking network communications. The vulnerability is classified under CWE-319 for cleartext transmission of sensitive information. The CVSS 4.0 base score is 5.3, indicating a medium severity risk.

CVE-2026-55393 is a critical path traversal vulnerability in Teledyne FLIR Aware2 software versions up to 6.9.0.2 (PackBot) and 1.7.9 (FirstLook). It allows remote unauthenticated attackers to read sensitive configuration and security parameters via the web interface by exploiting unvalidated pathnames. This affects both PackBot and FirstLook robots running the vulnerable software versions.

CVE-2026-14984 is a critical vulnerability in Teledyne FLIR Aware2 up to version 6.9.0.2 that involves cleartext transmission of sensitive information. This flaw allows remote unauthenticated attackers to intercept, hijack, or modify session traffic to Teledyne FLIR PackBot robots by sniffing or hijacking network communications. The vulnerability affects primary control endpoints and poses a high risk to confidentiality, integrity, and availability of the affected systems.

CVE-2026-14983 is a vulnerability in Teledyne FLIR Aware2 versions up to 6.9.0.2 where the web interface lacks authentication for a critical reboot function. This allows remote unauthenticated attackers to cause denial of service by misusing the reboot endpoint on Teledyne FLIR PackBot robots running the affected software.

A vulnerability was detected in Teledyne FLIR AX8 up to 1.46. Affected by this vulnerability is an unknown functionality of the file /upload.php. Performing manipulation of the argument File results in unrestricted upload. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 1.49.16 addresses this issue. Upgrading the affected component is recommended. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."

A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. This impacts the function subscribe_to_spot/subscribe_to_delta/subscribe_to_alarm of the file /usr/www/application/models/subscriptions.php of the component Backend. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.49.16 will fix this issue. It is suggested to upgrade the affected component. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."

A flaw has been found in Teledyne FLIR AX8 up to 1.46.16. The impacted element is an unknown function of the file /tools/test_login.php?action=register of the component User Registration. Executing manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been published and may be used. Upgrading to version 1.49.16 is sufficient to resolve this issue. Upgrading the affected component is recommended. The vendor points out: "FLIR AX8 internal web site has been refactored to be able to handle the reported vulnerabilities."