Cleartext Transmission Vulnerability in Teledyne FLIR Aware2 Software Affecting PackBot Robots
CVE-2026-14984

9.4CRITICAL

Key Information:

Vendor

Teledyne Flir

Status
Aware2
Vendor
CVE Published:
1 October 2026

What is CVE-2026-14984?

The Teledyne FLIR Aware2 software contains a security vulnerability that permits unauthenticated remote attackers to intercept, modify, or hijack session traffic. This flaw is present in versions up to 6.9.0.2, affecting Teledyne FLIR PackBot robots that utilize this software. Attackers may exploit the cleartext transmission in the primary control endpoints, risking the integrity and confidentiality of sensitive communication within the network.

Affected Version(s)

Aware2 0 <= 6.9.0.2

References

https://github.com/mandiant/Vulnerability-Disclosures/blo...
third-party-advisory

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.