CVE Program partner
TRO
Teradyne Robotics
CVEs, 365 days27 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | Teradyne Robotics |
| Role | CNA |
| Type | Vendor |
| Reports to | icscert → CISA |
| Scope | All products released by Teradyne Robotics subsidiaries, Universal Robots (UR) and Mobile Industrial Robots (MiR), including both actively supported and end-of-life/end-of-service products, as well as vulnerabilities in third-party software identified by Teradyne Robotics that are outside the scope of another CNA. |
| Advisories | https://www.universal-robots.com/articles/?filter_Applications[]=226617&filters[]=226617 |
Latest CVEs · RSS
- CVE-2026-8153 2026-05-08 · CVSS 9.8OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that
- CVE-2025-13819 2025-12-01 · CVSS 6.1Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafte
- CVE-2025-9229 2025-08-20 · CVSS 5.3Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error informatio
- CVE-2025-9228 2025-08-20 · CVSS 4.3MiR software versions prior to version 3.0.0 have insufficient authorization controls when creating text notes, allowing low-privilege users to create notes wh
- CVE-2025-9225 2025-08-20 · CVSS 5.5Stored cross-site scripting (XSS) in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScr
- CVE-2025-8749 2025-08-08 · CVSS 6.5Path Traversal vulnerability in API Endpoint in Mobile Industrial Robots (MiR) Software Versions prior to 3.0.0 on MiR Robots allows authenticated users to extr
- CVE-2025-8748 2025-08-08 · CVSS 8.8MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious HTTP request crafted by an authenticated user could