UN
Vendor
Unitree
37
CVEs
0
On KEV
0
New 30D
Products
G18.2
G1
Unitree
4 CVEs0 on KEV0 new
GO8.2
Go2
Unitree
4 CVEs0 on KEV0 new
B28.2
B2
Unitree
3 CVEs0 on KEV0 new
GF8.8
Go1 Firmware
Unitree
3 CVEs0 on KEV0 new
GF8.8
Go2 Firmware
Unitree
3 CVEs0 on KEV0 new
H18.2
H1
Unitree
3 CVEs0 on KEV0 new
AF7.5
A1 Firmware
Unitree
2 CVEs0 on KEV0 new
BF7.3
B2 Firmware
Unitree
1 CVEs0 on KEV0 new
GF7.3
G1 Firmware
Unitree
1 CVEs0 on KEV0 new
G16.5
Go 1
Unitree
1 CVEs0 on KEV0 new
G16.5
GO 1 Firmware
Unitree
1 CVEs0 on KEV0 new
GO6.6
Go1
Unitree
1 CVEs0 on KEV0 new
GA7.8
Go1 Air Firmware
Unitree
1 CVEs0 on KEV0 new
GP7.8
Go1 Pro Firmware
Unitree
1 CVEs0 on KEV0 new
GA7.8
Go2 Air Firmware
Unitree
1 CVEs0 on KEV0 new
GE8.0
Go2 Edu Firmware
Unitree
1 CVEs0 on KEV0 new
GE7.8
Go2 Edu Plus Firmware
Unitree
1 CVEs0 on KEV0 new
GE7.8
Go2 Edu Standard Firmware
Unitree
1 CVEs0 on KEV0 new
GP7.8
Go2 Pro Firmware
Unitree
1 CVEs0 on KEV0 new
GX7.8
Go2 X Firmware
Unitree
1 CVEs0 on KEV0 new
HF7.3
H1 Firmware
Unitree
1 CVEs0 on KEV0 new
UP7.8
UPK
Unitree
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-1442 | UP UPK Unitree | 7.8 | Feb 27 | Unitree UPK files Hard-Coded Key |
| CVE-2026-27510 | GF Go2 Firmware Unitree | 8.8 | Feb 26 | Unitree Go2 Mobile Program Tampering Enables Root RCE |
| CVE-2026-27509 | GE Go2 Edu Firmware Unitree | 8.0 | Feb 26 | Unitree Go2 Missing DDS Authentication Enables Adjacent RCE |
| CVE-2025-35027 | GO Go2 Unitree | 7.3 | Sep 26 | Unitree Multiple Robotic Products Command Injection |
| CVE-2025-60017 | H1 H1 Unitree | 8.2 | Sep 26 | Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_ssid or wifi_pass parameter (within restart_wifi_ap and… |
| CVE-2025-60250 | G1 G1 Unitree | 4.7 | Sep 26 | Unitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the df98b715d5c6ed2b25817b6f2554124a key and the 2841ae97419c2973296a0d4bdfe19a4f IV |
| CVE-2025-60251 | H1 H1 Unitree | 5.0 | Sep 26 | Unitree Go2, G1, H1, and B2 devices through 2025-09-20 accept any handshake secret with the unitree substring |
| CVE-2025-45467 | GF Go1 Firmware Unitree | 7.1 | Jul 25 | Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Ethernet) implements an insecure verification mechanism that… |
| CVE-2025-45466 | GF Go1 Firmware Unitree | 8.8 | Jul 25 | Unitree Go1 <= Go1_2022_05_11 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext |
| CVE-2025-2894 | GO Go1 Unitree | 6.6 | Mar 28 | Unitree Go1 Robot Dog Backdoor Control Channel |
| CVE-2023-3104 | AF A1 Firmware Unitree | 7.5 | Nov 22 | Missing Authentication for Critical Function in Unitree Robotics A1 |
| CVE-2023-3103 | AF A1 Firmware Unitree | 5.9 | Nov 22 | Authentication Bypass by Spoofing in Unitree Robotics A1 |
| CVE-2022-2675 | G1 Go 1 Unitree | 6.5 | Aug 5 | Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down |