High severity · published Oct 1, 2026
CVE-2026-55396
Unencrypted UDP Control Traffic in Teledyne FLIR Robots running Aware2
8.5
CVSS
0.1%
EPSS
No
On KEV
Description
Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows adjacent unauthenticated attackers to intercept, hijack, or modify control traffic against Teledyne FLIR PackBot and FirstLook robots running this software via sniffing or hijacking network traffic.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AW
Aware2 · Teledyne FLIR
through 6.9.0.2; through 1.7.9 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-55396
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-55396
third-party-advisory
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0032.md
More from Aware2
10.0
CVE-2026-55393
Local File Inclusion in Teledyne FLIR Robots running Aware2
9.4
CVE-2026-55395
Hardcoded Passwords in Teledyne FLIR Robots running Aware2
9.4
CVE-2026-14984
Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2
7.1
CVE-2026-14983
Missing Authentication in Teledyne FLIR Robots running Aware2
5.3
CVE-2026-55394
Unencrypted 802.11 Network in Teledyne FLIR Robots running Aware2