{"vulnerability": "cve-2026-2751", "sightings": [{"uuid": "be4a2804-3013-48ee-8511-a321090f08ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvybqlt6q2u", "content": "", "creation_timestamp": "2026-02-28T10:10:17.423867Z"}, {"uuid": "37597f08-7b7e-4342-9a40-444eb9a74aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27516", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfpqrtqp5w2u", "content": "", "creation_timestamp": "2026-02-25T22:40:08.672035Z"}, {"uuid": "88ea6bf1-cb0a-4cc9-9b69-2ee5ca6c552f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27519", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfpvb35cn723", "content": "", "creation_timestamp": "2026-02-26T00:00:14.582513Z"}, {"uuid": "4f62c0d4-e644-4323-9ba6-d84835c47699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2751", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfrggn5ko524", "content": "", "creation_timestamp": "2026-02-26T14:40:15.710758Z"}, {"uuid": "a8b92df2-b2a8-4437-9757-d4ffa5071937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mg33oyusox2y", "content": "", "creation_timestamp": "2026-03-02T10:54:41.996697Z"}, {"uuid": "114f0455-9358-49c4-b354-ba66e284b3cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mftdiguj2c2i", "content": "", "creation_timestamp": "2026-02-27T08:52:53.689680Z"}, {"uuid": "3a2d93b4-9c35-41aa-aaf6-dcbc6eceea5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27516", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmlqxcvqv2n", "content": "", "creation_timestamp": "2026-02-24T16:32:11.889133Z"}, {"uuid": "e7bad1d8-0951-4ef8-8030-056daf3e2363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27519", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmlr5x6xu2s", "content": "", "creation_timestamp": "2026-02-24T16:32:18.210843Z"}, {"uuid": "26a982a3-7685-430a-bb56-3c834e01d3f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27515", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmm3ketbj2c", "content": "", "creation_timestamp": "2026-02-24T16:38:07.622644Z"}, {"uuid": "74b412fc-64c8-43d3-b92c-51817e2e33f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27519", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfmo7pvhit2d", "content": "", "creation_timestamp": "2026-02-24T17:16:14.241458Z"}, {"uuid": "0eec5755-35a2-4ae8-a05f-72e2b2548d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mfrwjim45725", "content": "", "creation_timestamp": "2026-02-26T19:28:11.079353Z"}, {"uuid": "ae301f13-86e3-472a-87d7-e8a44b240029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2751", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfvoj3h3sz2c", "content": "", "creation_timestamp": "2026-02-28T07:15:26.928802Z"}, {"uuid": "653a9923-7969-4c13-a09c-452108d74cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mfs2j4uxcn2u", "content": "", "creation_timestamp": "2026-02-26T20:39:33.334625Z"}, {"uuid": "769b7e2c-b0fc-424e-bf2d-ddc144752883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/sambowne.infosec.exchange.ap.brid.gy/post/3mg46d6u62uh2", "content": "", "creation_timestamp": "2026-03-02T21:14:31.943705Z"}, {"uuid": "1b5b1568-66b2-4ba2-b0e5-5535ff68b0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27515", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfpcaxsjfl2e", "content": "", "creation_timestamp": "2026-02-25T18:20:10.463227Z"}, {"uuid": "a6240a8e-a3a5-449e-b0a3-96bab3072068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-27510", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mg4eadkg7e2j", "content": "", "creation_timestamp": "2026-03-02T23:00:13.419605Z"}, {"uuid": "45f32559-a52a-4bf3-bb70-2721ba1959c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2751", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mftv7w4qea2s", "content": "", "creation_timestamp": "2026-02-27T14:10:14.983035Z"}, {"uuid": "6452856f-0913-4df8-8fd2-7f7e3bb70727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mqqx37hsq52k", "content": "From DDS Packets to Robot Shells: Two RCEs in Unitree Robots (CVE-2026-27509 & CVE-2026-27510)\n#DDS #IoTSecurity #IoTVulnerabilities #UnauthenticatedRCE #Unitree\nhttps://core-jmp.org/2026/07/unitree-go2-rce-cve-2026-27509-27510/", "creation_timestamp": "2026-07-16T09:42:33.598999Z"}, {"uuid": "9ea56c63-6a46-4d4b-b0d3-34b5a5becce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "seen", "source": "https://t.me/purp_sec/1423", "content": "\u041a\u0442\u043e-\u0442\u043e \u0441\u043d\u043e\u0432\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u0440\u043e\u0431\u043e\u0442\u0430 Unitree \ud83d\ude2e\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u0438\u0437 \u0411\u0430\u0441\u0442\u0438\u043e\u043d\u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043f\u0440\u043e \u0432\u0437\u043b\u043e\u043c \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 Unitree G1. \u0422\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043a\u0438\u0431\u043e\u0440\u0433\u0430-\u0443\u0431\u0438\u0439\u0446\u0443 \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0430\u043c \u0438 \u0441\u0430\u043b\u044c\u0442\u043e \u043f\u043e\u043a\u0430\u0436\u0435\u0442, \u0438 \u043a\u0443\u043d\u0433-\u0444\u0443, \u0438 \u0434\u0430\u0436\u0435 \u043f\u0430\u043b\u043a\u043e\u0439 \u043f\u043e \u0433\u043e\u043b\u043e\u0432\u0435 \u043f\u043e\u0441\u0442\u0443\u0447\u0438\u0442 \u0434\u0430 \u043f\u0440\u043e\u0441\u0442\u0438\u0442 \u043d\u0430\u0441 \u0410\u0437\u0438\u043c\u043e\u0432. \u041a\u0430\u043a \u0442\u043e\u0433\u0434\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0444\u0443\u043d\u043a\u0446\u0438\u044f eval() \u0432 \u043a\u043e\u0434\u0435 \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 \u0441\u0442\u0440\u0430\u0448\u043d\u0435\u0435 \u043b\u044e\u0431\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0438\u044f \u043c\u0430\u0448\u0438\u043d.\n\n\u0418 \u0432\u043e\u0442 \u0432\u0430\u043c \u0441\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0443\u0436\u0435 \u043f\u0440\u043e Unitree Go2 \u2014 \u0447\u0435\u0442\u0432\u0435\u0440\u043e\u043d\u043e\u0433\u043e\u0433\u043e \u0440\u043e\u0431\u043e\u0442\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 Linux (ARM), \u0441 Wi-Fi, LTE (\u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445), OTA-\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2026-27509 \u0438 CVE-2026-27510 \u0441\u043c\u043e\u0433\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u043d\u0430 \u0440\u043e\u0431\u043e\u0441\u043e\u0431\u0430\u043a\u0435 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043d\u0435\u0439.\n\nCVE-2026-27509 \u2014 \u044d\u0442\u043e unauthRCE \u0447\u0435\u0440\u0435\u0437 DDS-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 Unitree Go2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 actuator_manager.py, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u0442\u043e\u043f\u0438\u043a rt/api/programming_actuator/request \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 (DDS domain 0 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 api_id=1002, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434 \u0432 JSON-\u043f\u043e\u043b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430.\n\u23fa\u041a\u043e\u0434 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0444\u0430\u0439\u043b /unitree/etc/programming/.py \u0438 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, R1+Y) \u0447\u0435\u0440\u0435\u0437 hotkey_manager.py.\n\u23fa\u041f\u043e\u0441\u043b\u0435 \u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0440\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e subprocess.Popen(['python3', ...]). \u042d\u0442\u043e \u0434\u0430\u0435\u0442 \u043f\u0435\u0440\u0441\u0438\u0441\u0442\u0435\u043d\u0442\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f.\n\nCVE-2026-27510 \u2014 RCE \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 SQLite-\u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Unitree Go2 (\u0444\u0430\u0439\u043b /data/data/com.unitree.doggo2/databases/unitree_go2.db, \u0442\u0430\u0431\u043b\u0438\u0446\u0430 dog_programme). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0431\u0430\u0437\u0443.\n\u23fa\u0418\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u043e\u043b\u0435 pyCode \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434.\n\u23fa\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0430\u0437\u0443 \u0441 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0441 \u0440\u043e\u0431\u043e\u0442\u043e\u043c. \n\u23fa\u041f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u043a \u043a\u043b\u0430\u0432\u0438\u0448\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, L1+Y) \u0431\u043b\u043e\u043a Blockly \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u043a\u043e\u0434 \u0432 \u0442\u043e\u0442 \u0436\u0435 actuator_manager.py, \u0433\u0434\u0435 \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\u23fa\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\ud83d\udde3 \u0427\u0438\u0442\u0430\u0435\u043c \u0432\u0441\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#red_team", "creation_timestamp": "2026-09-14T18:00:06.921873Z"}, {"uuid": "e5ac56ca-7b5f-4d9c-b06a-eb0f729355e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-27510", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1423", "content": "\u041a\u0442\u043e-\u0442\u043e \u0441\u043d\u043e\u0432\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u0440\u043e\u0431\u043e\u0442\u0430 Unitree \ud83d\ude2e\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u0438\u0437 \u0411\u0430\u0441\u0442\u0438\u043e\u043d\u0430 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043f\u0440\u043e \u0432\u0437\u043b\u043e\u043c \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 Unitree G1. \u0422\u043e\u0433\u043e \u0441\u0430\u043c\u043e\u0433\u043e \u043a\u0438\u0431\u043e\u0440\u0433\u0430-\u0443\u0431\u0438\u0439\u0446\u0443 \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u0442\u0432\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u0430\u043c \u0438 \u0441\u0430\u043b\u044c\u0442\u043e \u043f\u043e\u043a\u0430\u0436\u0435\u0442, \u0438 \u043a\u0443\u043d\u0433-\u0444\u0443, \u0438 \u0434\u0430\u0436\u0435 \u043f\u0430\u043b\u043a\u043e\u0439 \u043f\u043e \u0433\u043e\u043b\u043e\u0432\u0435 \u043f\u043e\u0441\u0442\u0443\u0447\u0438\u0442 \u0434\u0430 \u043f\u0440\u043e\u0441\u0442\u0438\u0442 \u043d\u0430\u0441 \u0410\u0437\u0438\u043c\u043e\u0432. \u041a\u0430\u043a \u0442\u043e\u0433\u0434\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0444\u0443\u043d\u043a\u0446\u0438\u044f eval() \u0432 \u043a\u043e\u0434\u0435 \u0430\u043d\u0434\u0440\u043e\u0438\u0434\u0430 \u0441\u0442\u0440\u0430\u0448\u043d\u0435\u0435 \u043b\u044e\u0431\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0438\u044f \u043c\u0430\u0448\u0438\u043d.\n\n\u0418 \u0432\u043e\u0442 \u0432\u0430\u043c \u0441\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0443\u0436\u0435 \u043f\u0440\u043e Unitree Go2 \u2014 \u0447\u0435\u0442\u0432\u0435\u0440\u043e\u043d\u043e\u0433\u043e\u0433\u043e \u0440\u043e\u0431\u043e\u0442\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 Linux (ARM), \u0441 Wi-Fi, LTE (\u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445), OTA-\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2026-27509 \u0438 CVE-2026-27510 \u0441\u043c\u043e\u0433\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f RCE \u043d\u0430 \u0440\u043e\u0431\u043e\u0441\u043e\u0431\u0430\u043a\u0435 \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043d\u0435\u0439.\n\nCVE-2026-27509 \u2014 \u044d\u0442\u043e unauthRCE \u0447\u0435\u0440\u0435\u0437 DDS-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 Unitree Go2. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 actuator_manager.py, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u0442\u043e\u043f\u0438\u043a rt/api/programming_actuator/request \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 (DDS domain 0 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 api_id=1002, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434 \u0432 JSON-\u043f\u043e\u043b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430.\n\u23fa\u041a\u043e\u0434 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0444\u0430\u0439\u043b /unitree/etc/programming/.py \u0438 \u043f\u0440\u0438\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, R1+Y) \u0447\u0435\u0440\u0435\u0437 hotkey_manager.py.\n\u23fa\u041f\u043e\u0441\u043b\u0435 \u043a\u043e\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0440\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u0438 \u043a\u043b\u0430\u0432\u0438\u0448\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e subprocess.Popen(['python3', ...]). \u042d\u0442\u043e \u0434\u0430\u0435\u0442 \u043f\u0435\u0440\u0441\u0438\u0441\u0442\u0435\u043d\u0442\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f.\n\nCVE-2026-27510 \u2014 RCE \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 SQLite-\u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Unitree Go2 (\u0444\u0430\u0439\u043b /data/data/com.unitree.doggo2/databases/unitree_go2.db, \u0442\u0430\u0431\u043b\u0438\u0446\u0430 dog_programme). \n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0431\u0430\u0437\u0443.\n\u23fa\u0418\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u043e\u043b\u0435 pyCode \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 Python-\u043a\u043e\u0434.\n\u23fa\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0431\u0430\u0437\u0443 \u0441 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0441 \u0440\u043e\u0431\u043e\u0442\u043e\u043c. \n\u23fa\u041f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u043a \u043a\u043b\u0430\u0432\u0438\u0448\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, L1+Y) \u0431\u043b\u043e\u043a Blockly \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u043a\u043e\u0434 \u0432 \u0442\u043e\u0442 \u0436\u0435 actuator_manager.py, \u0433\u0434\u0435 \u043e\u043d \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0442 root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\u23fa\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440 \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\ud83d\udde3 \u0427\u0438\u0442\u0430\u0435\u043c \u0432\u0441\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#red_team", "creation_timestamp": "2026-09-15T00:00:11.434078Z"}]}