CVE-2026-76640 is a high-severity vulnerability in Unitree G1 EDU firmware through version 1.5.2. Multiple chained vulnerabilities in the BLE GATT server and WiFi provisioning stack allow unauthenticated proximate attackers to achieve root code execution without pairing or credentials. Attackers can exploit an unquoted heredoc variable in the WiFi provisioning script and a buffer overflow in the SSID chun [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-27T20:18:38.230Z and has not been modified since then. The CVE-2026-76639 vulnerability is an unauthenticated remote code execution issue in Unitree G1 EDU firmware through version 1.5.2. It results from the combination of three weaknesses: an unauthenticated WebRTC-to-DDS bridge on TCP port 9991, a [truncated]
