CRITICAL 9.4 NVD

CVE-2026-14984

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, h

Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic.

References

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0028.md

Published: 2026-10-01 · Source: NVD · Feed updated: 2026-10-01

This critical severity vulnerability with a CVSS score of 9.4 was published on 2026-10-01 via NVD.

Risk Timeline

CVE Disclosed2026-10-01 · -1 days ago

Remediation Resources

GitHub

github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-20

vulnfeed aggregates 9446 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.