Is CVE-2026-7413 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-7413 being exploited in the wild.

How severe is CVE-2026-7413?

High severity, with a CVSS score of 7.2, published 7 May 2026.

Which products and versions are affected?

Yarbo Lawn Mower Firmware 2.3.9; Yarbo Lawn Mower Pro Firmware 2.3.9.

Is there a fix for CVE-2026-7413?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-7413 attacked?

It is attacked over the network, in device firmware.

Am I affected by CVE-2026-7413?

Check whether you run Yarbo Lawn Mower, Yarbo Lawn Mower Firmware, Yarbo Lawn Mower Pro or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-7413: Yarbo Lawn Mower firmware persistent backdoor in SSH service

CVE-2026-7413 · Severity: high · CVSS 7.2 · Published 2026-05-07

A hidden backdoor was discovered in Yarbo smart lawn mower robots that allows unauthorized remote access to the device's core operating system. An attacker can exploit this to take full control of the robot, access sensitive camera or location data, and disrupt operations. This backdoor is designed to survive factory resets and standard updates, making it difficult for users to remove without official vendor intervention.

Technologies: Yarbo Lawn Mower, Yarbo Lawn Mower Firmware, Yarbo Lawn Mower Pro, Yarbo Lawn Mower Pro Firmware. Vendors: Yarbo.

Quick answers

Is CVE-2026-7413 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-7413 being exploited in the wild.
How severe is CVE-2026-7413?: High severity, with a CVSS score of 7.2, published 7 May 2026.
Which products and versions are affected?: Yarbo Lawn Mower Firmware 2.3.9; Yarbo Lawn Mower Pro Firmware 2.3.9.
Is there a fix for CVE-2026-7413?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-7413 attacked?: It is attacked over the network, in device firmware.
Am I affected by CVE-2026-7413?: Check whether you run Yarbo Lawn Mower, Yarbo Lawn Mower Firmware, Yarbo Lawn Mower Pro or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An undocumented SSH service (CWE-912) is present in Yarbo firmware v2.3.9, listening on all affected devices and reachable via a NAT-punching proxy system. The service provides an interactive shell with root privileges. Because the component is restored during the normal boot process, the backdoor is persistent across factory resets and standard firmware updates. While some assessments suggest high privileges are required, NVD analysis indicates the vulnerability is reachable over the network without authentication, leading to a total compromise of confidentiality, integrity, and availability. When combined with other vulnerabilities like hardcoded credentials, it allows for fleet-wide remote command execution.

Affected products

Yarbo Lawn Mower firmware 2.3.9
Yarbo Lawn Mower Pro firmware 2.3.9

Timeline

2026-04-12: other: Initial outreach to vendor
2026-04-29: other: CVE reserved
2026-05-07: disclosed: Public disclosure
2026-05-07: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.