Approved changes feed: RSS · Atom
cpe:2.3:a:mobile_industrial_robots:mir_fleet:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mobile Industrial Robots (2862cb8f-81cc-5eb7-b7bd-8899a62284a0) |
|---|---|
| Product | Mir Fleet (f9f8ec47-17e0-5562-b758-7222bbdb8411) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-9229 |
vulnerable | 2026-06-08 07:45:21.920265 |
Information Disclosure in MiR robots and MiR fleet through verbose error pages
MEDIUM (5.3)
Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose error pages.
Published: 2025-08-20T08:36:57.846Z
Updated: 2025-11-05T12:09:23.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9228 |
vulnerable | 2026-06-08 07:45:21.919934 |
Insufficient authorization when creating notes
MEDIUM (4.3)
MiR software versions prior to version 3.0.0 have insufficient authorization controls when creating text notes,
allowing low-privilege users to create notes which are intended only for administrative users.
Published: 2025-08-20T08:24:33.175Z
Updated: 2025-11-05T12:08:35.758Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-9225 |
vulnerable | 2026-06-08 07:45:21.915376 |
Cross-site scripting (XSS) in MiR robots and MiR fleet
MEDIUM (5.5)
Stored cross-site scripting (XSS) in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim’s browser
Published: 2025-08-20T07:26:01.629Z
Updated: 2025-11-05T12:07:24.766Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8748 |
vulnerable | 2026-06-08 07:45:21.104587 |
OS command injection in MiR robots and MiR fleet via crafted HTTP requests
HIGH (8.8)
MiR software versions prior to version 3.0.0 are affected by a command injection vulnerability. A malicious
HTTP request crafted by an authenticated user could allow the execution of arbitrary commands on the
underlying operating system.
Published: 2025-08-08T11:09:17.348Z
Updated: 2025-11-05T12:02:30.747Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.