CVE-2026-8153 — Command injection in Dashboard Server interface

CVE-2026-8153

Command injection in Dashboard Server interface PUBLISHED

Description (CNA)

OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will execute code on the robot's OS.

Affected (CNA)

Vendor / product	Versions
Universal Robots / PolyScope 5	affected 0 before 5.25.1

CWE

CWE-78

References

https://www.universal-robots.com/developer/communication-protocol/dashboard-server/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.