CVE-2026-55395

CVSS 9.4 (critical) · published 2026-10-01

Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to access and reconfigure Teledyne FLIR PackBot and FirstLook robots running this software via reading the passwords from the firmware or documentation.

Weakness: CWE-798

Source: NVD CVE-2026-55395

References

• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0031.md

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.