PatchTheCVECVE-2020-10266: UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots
CVE-2020-10266 is a high-severity flaw (CVSS 8.1) affecting ur\+. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots (e.g. in the UR10), no integrity checks are performed. Moreover, the SDK for making such components can be easily obtained from Universal Robots. An attacker could exploit this flaw by crafting a custom component with the SDK, performing Person-In-The-Middle attacks (PITM) and shippin
Why this priority
- High severity
- Remotely exploitable, no login, no user action
No fix is published yet: follow the downgrade or mitigation steps.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-10266?
ur\+: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2020-10266 being exploited?
CVE-2020-10266 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-10266 affect?
CVE-2020-10266 affects ur\+. Severity is high (CVSS 8.1). UR+ (Universal Robots+) is a platform of hardware and software component sellers, for Universal Robots robots. When installing any of these components in the robots (e.g. in the UR10), no integrity checks are performed. Moreover, the SDK fo
How urgent is CVE-2020-10266?
Priority 44/100. High severity; Remotely exploitable, no login, no user action