by Kastro
Paper/Archive/CVE-2026-8153

CVE-2026-8153

Universal Robots PolyScope 5 — Command injection in Dashboard Server interface

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 86.7.867 × 2017.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS.

Affected

ProductAffectedFixed inSource
PolyScope 5< 5.25.15.25.1CNA

Scores by source

TRO (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refuniversal-robots.com/developer/communication-protocol/dashboard-server