Universal Robots Polyscope 5
Critical OS command injection in Universal Robots Polyscope 5 allows unauthenticated remote code execution.
Universal Robots has released a critical security advisory (CISA ICSA-26-134-17) addressing CVE-2026-8153, an OS command injection vulnerability in Polyscope 5 versions prior to 5.25.1. The flaw allows unauthenticated attackers to execute arbitrary code on the robot's operating system via the Dashboard Server interface, with a CVSS score of 9.8 (critical). Universal Robots has released patched version 5.25.1 to remediate the vulnerability.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Universal Robots?
Get an email when a new story names Universal Robots, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Automated patch management
Known holes get closed in days, not months.
- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-8153