VULNERABILITY INTELLIGENCE

CVE-2026-76639

CVSS score8.8 HIGH

EPSS probability0.52%

CISA KEVNot currently listed

Published2026-08-27

Last modified2026-09-08

Description

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows network-adjacent attackers to execute arbitrary commands as root by chaining three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a static AES-128 key stored with …