Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function WebSocketClient.connect of the file websocket.py of the component chat_go. Performing a manipulation results in improper certificate validation. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is reported as difficult. The vendor confirmed early: "These issues were previously submitted by the researcher through our Security Response Center platform and are tracked internally as follows: Submission 990504 corresponds to our internal ticket #616 (Go2 chat_go WSS client disabled TLS server certificate validation, CWE-295)."
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
The fix named for a 9.6 in Unitree's Go2 robot is four version lines behind the firmware the companion record still calls affected. Both landed 584 milliseconds apart. No exploitation reported. https://severitydaily.com/unitree-go2-chat-go-cve-2026-115995-9-6-set-volume-1-1-11-5-fix-cve-2026-115996-1-1-15-1-affected-no-vendor-advisory/