[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_mXcT07bucjMal5aVfZrc4xLTZP0tCQRDAEnLQaZ9RE":3},{"article":4,"iocs":47,"watch_terms":52,"solutions":53,"lesson":28},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"3a7f6e5d-ae52-4959-86c4-d236d14ef71f","Critical Vulnerability Exposes Industrial Robot Fleets to Hacking","critical-vulnerability-exposes-industrial-robot-fleets-to-hacking-b78d87","The vulnerability, CVE-2026-8153, affects Universal Robots PolyScope 5 and it can be exploited for OS command injection. The post Critical Vulnerability Exposes Industrial Robot Fleets to Hacking appeared first on SecurityWeek.","Universal Robots patched a critical vulnerability (CVE-2026-8153, CVSS 9.8) in PolyScope 5 that allows unauthenticated attackers with network access to execute arbitrary OS commands on cobot controllers via the Dashboard Server interface. The vulnerability requires the Dashboard Server to be enabled and reachable, but in flat, unsegmented industrial networks, compromising one robot could lead to fleet-wide compromise and physical safety hazards.","Critical OS command injection vulnerability CVE-2026-8153 in Universal Robots PolyScope 5 allows unauthenticated RCE.","https:\u002F\u002Fwww.securityweek.com\u002Fcritical-vulnerability-exposes-industrial-robot-fleets-to-hacking\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F05\u002Fcobot-industrial-robot-arm.jpeg","2026-05-19T06:18:51+00:00","2026-05-19T08:00:03.515633+00:00",9,[17,20,23],{"name":18,"type":19},"Universal Robots","vendor",{"name":21,"type":22},"PolyScope 5","product",{"name":24,"type":25},"Dashboard Server","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37,42],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":43},{"id":44,"icon":28,"name":45,"slug":46},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[48],{"type":49,"value":50,"context":51},"cve","CVE-2026-8153","OS command injection in Universal Robots PolyScope 5 Dashboard Server; CVSS 9.8; patched in version 5.25.1",[18,21],{"controls":54,"vendors":141},[55,83,112],{"slug":56,"name":57,"problem":58,"products":59},"patch-management","Automated patch management","Known holes get closed in days, not months.",[60,68,75],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":56,"product_name":72,"url":73,"description":74},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"slug":84,"name":85,"problem":86,"products":87},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"slug":113,"name":114,"problem":115,"products":116},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",[142],{"slug":126,"name":127,"logo_path":128,"roles":143},[144],"reported_by"]