SpaceX's consumer hardware has a small CVE footprint, and one is genuinely open. All are Starlink : Open / unfixed: • CVE-2026-19918 — Starlink Router Gen 3 (firmware 2025.11.14.mr64708.3), get_status on the gRPC management interface has improper access controls. LAN-only, CVSS 6.3 Medium, exploit is public (published via http://ararasat.com), and per the MITRE record "the vendor was contacted early about this disclosure but did not respond in any way." No fixed firmware listed. Published Aug 2026 — still standing. Fixed or disputed: • CVE-2025-67780 ("MARMALADE 2") — Starlink Dish, unauthenticated LAN gRPC lets admin actions through and leaks dish orientation (location inference). CVSS 4.2 — and SpaceX disputes it, saying unauthenticated LAN gRPC is intended behavior for the mobile app. • CVE-2023-49965 — Gen 2 router XSS via SSID/password fields on the setup page; fixed in firmware 2023.48.0. • CVE-2023-52235 — Gen 2 router + dish CSRF via DNS rebinding (could force a reboot); fixed in router firmware 2023.53.0.