Vulnerabilities

CVSS

9.8 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Risk score

78.4

Published

2026-05-08

Status

Awaiting Analysis

OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS.

Weaknesses

CWE-78

Coverage 3

threat-intel

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

This week’s security news highlights a significant GitHub breach orchestrated by TeamPCP, stemming from a compromised developer’s device and leveraging vulnerabilities exposed by the TanStack supply chain attack. Simulta…

The Hacker News · May 25, 2026 High

CVE-2026-46333CVE-2026-41091CVE-2026-45498USGBsupply-chainlinuxgithub

threat-intel

Patch Now: Critical Flaw in OT Robot OS Gives Attackers Control

A critical command injection vulnerability (CVE-2026-8153) was discovered in the operating system of Universal Robots’ PolyScope 5 collaborative robots. This flaw allows unauthenticated attackers to gain remote access an…

Dark Reading · May 20, 2026 Critical

CVE-2026-8153DEcommand injectionotrobotics

vulnerability

Universal Robots Polyscope 5

A critical vulnerability has been identified in Universal Robots Polyscope 5 software versions prior to 5.25.1, allowing for unauthenticated code execution via OS command injection. This poses a significant risk to criti…

CISA Advisories · May 14, 2026 Critical

CVE-2026-8153WOcommand injectionroboticscve-2026-8153

All articles mentioning it

Advisories and references

• universal-robots.com/developer/communication-protocol/dashboard-serv...