https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-10286.htmlhttps://patchthecve.com/cve/CVE-2020-10286.htmlWed, 17 Jun 2026 02:47:37 +0000HIGH 8.8: the main user account has restricted privileges but is in the sudoers group and there is not any mechanism in place to prevent sudo su or sudo -i to be run gaining unrestricted access to sensible files, encryption, or issue orders that disrupt robot operation.https://patchthecve.com/cve/CVE-2020-10285.htmlhttps://patchthecve.com/cve/CVE-2020-10285.htmlWed, 17 Jun 2026 02:47:37 +0000CRITICAL 9.8: The authentication implementation on the xArm controller has very low entropy, making it vulnerable to a brute-force attack. There is no mechanism in place to mitigate or lockout automated attempts to gain access.https://patchthecve.com/cve/CVE-2020-10284.htmlhttps://patchthecve.com/cve/CVE-2020-10284.htmlWed, 17 Jun 2026 02:47:37 +0000CRITICAL 9.1: No authentication is required to control the robot inside the network, moreso the latest available user manual shows an option that lets the user to add a password to the robot but as in xarm_studio 1.3.0 the option is missing from the menu. Assuming manual control, even by forcefully removing the c