RobotRisk Autonomous Systems Incident & Risk Register
RobotRisk › Cyber incidents
Incident type

Cyber incidents

24 documented cyber incidents across 16 companies.

24Unique incidents
16Companies involved
S5Highest severity
29%Verified
29%From regulators
2017-2026Years covered

By submitting you agree to the privacy policy. Alerts start immediately; every email has an unsubscribe link.

SevDateCompanyTypeLocationIncidentSource
S513 Jul 2026SharkNinja cyber —Shark robot vacuum flaw allows remote code execution via stolen certificate Tom's Hardware / Cyberne
S307 Mar 2026DJI cyber —DJI Pays $30K Bug Bounty After Researcher Hacks 7,000 Robot Vacuums The Tech Buzz
S2~May 2026Yarbo cyber —Security vulnerability exposed in ~6,000 Yarbo robot lawn mowers · 11,000 devices Gadget Review / Times of
S211 Feb 2026DJI cyber Multiple countriesDJI Cloud Authorization Bug Exposes Data From Nearly 7,000 Robot Vacuums · ~7,000 devices across 24 countries Popular Science
S202 Sep 2025Dreame Technology cyber —Security flaws found in Dreame (and Ecovacs) robot vacuums with cameras Korea JoongAng Daily / c
S2~Sep 2025Unitree cyber —UniPwn wormable Bluetooth exploit roots Unitree Go2, B2, G1 and H1 · fleet-wide (Go2, B2, G1, H1 models) The Robot Report
S2~Aug 2024Ecovacs cyber —Researchers demonstrate Bluetooth/PIN flaw letting attackers hijack Ecovacs Deebot cameras and mics · multiple Deebot models Security Affairs
S2~May 2024Ecovacs cyber —Hacked Ecovacs Deebot X2 vacuums shout racial slurs, chase pet in multiple US cities · at least 2 households across multiple cities Tom's Guide
S2~Mar 2018DJI cyber —Check Point Research discloses DJI account/data vulnerability · platform-wide (patched, no confirmed exploitation) Check Point Research
S2~May 2017ABB cyber —Researchers demonstrate remote hack of ABB IRB140 industrial robot causing unsafe physical movement · 1 robot (research demonstration) Help Net Security
S2not documentedUnitree cyber —Backdoor (CVE-2025-2894) found in Unitree Go1 robot firmware · fleet-wide (Go1 model) OECD.AI Incident Monitor
S127 Aug 2026Unitree cyber —Two root RCE flaws (CVE-2026-76639/76640) disclosed in Unitree G1 EDU · fleet-wide (G1 EDU model) The Hacker News
S127 Aug 2026OTTO Motors cyber WorldwideCISA publishes Rockwell Automation OTTO Fleet Manager vulnerability advisory · OTTO Fleet Manager <=2.36.2 CISA ICS advisory ICSA-2
S127 Aug 2026Mitsubishi Electric (Automation) cyber WorldwideCISA updates Mitsubishi Electric CNC Series advisory for denial-of-service vulnerability · multiple CNC Series controller versions CISA ICS advisory ICSA-2
S127 Aug 2026Mitsubishi Electric (Automation) cyber WorldwideCISA updates Mitsubishi Electric Multiple FA Products denial-of-service advisory · multiple factory automation product versions CISA ICS advisory ICSA-2
S104 Aug 2026Thermo Fisher Scientific cyber WorldwideCISA publishes Thermo Fisher Applied Biosystems genetic analyzer advisory · multiple Applied Biosystems analyzer software versions CISA ICS medical advisor
S1~Oct 2025Unitree cyber —Unauthenticated RCE flaws (CVE-2026-27509, CVE-2026-27510) found in Unitree Go2 · fleet-wide (Go2 model, firmware V1.1.7/V1.1.11) boschko.ca
S107 Jul 2025Frauscher Sensor Technology cyber —Critical command-injection vulnerability disclosed in Frauscher train-detection diagnostic system · product line (FDS101/FDS102/FDS-SNMP101); no confirmed exploitation Frauscher PSIRT
S1~May 2025Ecovacs cyber —CISA advisory: Ecovacs Deebot base stations accept unvalidated firmware updates, deterministic WiFi key · Deebot Goat G1, Deebot 900/N8/T8 and related models CISA
S115 Sep 2021Roborock cyber —Roborock discloses insecure random-number generator flaw in Tuya IoT cloud connection · 5 models Roborock
S131 Aug 2021FANUC cyber —CISA advisory: buffer overflow / integer coercion vulnerabilities in FANUC robot controllers · FANUC robot controller product line CISA ICS-CERT
S127 Jul 2021KUKA cyber —CISA advisory: hard-coded credentials in KUKA KR C4 robot controller (CVSS 9.8) · KUKA KR C4 controller product line CISA ICS-CERT
S120 Apr 2021BlackBerry QNX cyber —BadAlloc Vulnerability Impacts Critical Infrastructure Using BlackBerry QNX BleepingComputer
S129 May 2018SoftBank Robotics cyber —Security researchers find Pepper robot lacks basic authentication/security controls The Register

Companies involved

ABBBlackBerry QNXDJIDreame TechnologyEcovacsFANUCFrauscher Sensor TechnologyKUKAMitsubishi Electric (Automation)OTTO MotorsRoborockSharkNinjaSoftBank RoboticsThermo Fisher ScientificUnitreeYarbo
Also from Critical Systems Analysis: CSA - functional safety engineering · Company directory · FSTalent - functional safety jobs