CVE-2026-7413

Опубликовано: 07 мая 2026

Источник: nvd

CVSS3: 7.2

CVSS3: 9.8

EPSS Низкий

Описание

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authenticated) access to privileged functionality. The backdoor is undocumented, cannot be disabled via user-facing settings, and survives factory reset and ordinary firmware updates.

Ссылки

https://github.com/Bin4ry/yarbo-nat-in-my-back-yard
Exploit
Third Party Advisory
https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000000111111111111111111111110000000000000000000000000000000000000000000000000000000111
Third Party Advisory
https://takeonme.org/cves/cve-2026-7413/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:yarbo:lawn_mower_firmware:2.3.9:*:*:*:*:*:*:*

cpe:2.3:h:yarbo:lawn_mower:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:yarbo:lawn_mower_pro_firmware:2.3.9:*:*:*:*:*:*:*

cpe:2.3:h:yarbo:lawn_mower_pro:-:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00577

Низкий

7.2 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-912

NVD-CWE-noinfo

Связанные уязвимости

GHSA-pq5m-hxx2-xhw5

CVSS3: 7.2

github

3 месяца назад

EPSS

Процентиль: 44%

0.00577

Низкий

7.2 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-912

NVD-CWE-noinfo