PT-2026-64896 · Ghost Robotics · Vision 60

CVE-2026-12990 · Publicado 2026-07-27 · Atualizado 2026-07-27

Mitre

CVSS v4.0

7.7

Alta

Vetor base

AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

An access control vulnerability in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows multiple simultaneous sessions to run without proper client validation or session integrity checks. An attacker with a modified version of the app can connect to the robot during an active, legitimate session. This allows the attacker to bypass control restrictions, intercept sensitive information (such as real-time video), and partially interact with the system unnoticed and without disconnecting the legitimate user, compromising confidentiality and operational security.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-12990

Produtos afetados

Vision 60

Referências · 2

• https://incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ghost-robotics-vision-60 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-12990 · Nota de Segurança