RobotRisk Autonomous Systems Incident & Risk Register
RobotRisk / Yarbo / 2026-05

Security vulnerability exposed in ~6,000 Yarbo robot lawn mowers

S2 · 05/2026 · Yarbo

Record

CompanyYarbo
Categoryconsumer robotics
Typecyber
Date05/2026
Time of daynot documented
Locationno physical site (recall / fleet-wide / aggregate record)
SeverityS2 (minor injury or single-unit damage)
Scale11,000 devices
Confidencemedium
VerificationYes - adversarially checked against the cited source
SourceGadget Review / Times of India

What happened

German security researcher Andreas Makris disclosed a vulnerability (identical default admin credentials) affecting roughly 6,000 internet-connected Yarbo robotic yard/mower units, allowing remote hacking, live camera access, and remote control of the mower blades; Yarbo confirmed the findings and began rolling out fixes.

Yarbo record context

Entries by year and severity

122026 S2: 12026 S4: 1226
S1S2S3S4S5

By incident type

By severity

Yarbo vs consumer robotics alternatives

consumer robotics context

consumer robotics: entries by year

252018 S1: 11182020 S3: 11202021 S1: 11212022 S3: 11222023 S3: 22232024 S2: 22024 S4: 13242025 S1: 12025 S2: 23252026 S2: 12026 S3: 12026 S4: 12026 S5: 2526
S1S2S3S4S5

consumer robotics: failure modes

consumer robotics: most entries

cyber context

cyber: by category

cyber: by year

cyber: severity profile

Comparable cyber events in consumer robotics

SevDateCompanyEvent
S52026-07-13SharkNinjaShark robot vacuum flaw allows remote code execution via stolen certificate
S22025-09-02Dreame TechnologySecurity flaws found in Dreame (and Ecovacs) robot vacuums with cameras
S12025-05EcovacsCISA advisory: Ecovacs Deebot base stations accept unvalidated firmware updates, deterministic WiFi key
S22024-08EcovacsResearchers demonstrate Bluetooth/PIN flaw letting attackers hijack Ecovacs Deebot cameras and mics
S22024-05EcovacsHacked Ecovacs Deebot X2 vacuums shout racial slurs, chase pet in multiple US cities
S12021-09-15RoborockRoborock discloses insecure random-number generator flaw in Tuya IoT cloud connection
S12018-05-29SoftBank RoboticsSecurity researchers find Pepper robot lacks basic authentication/security controls

Other Yarbo entries

Also from Critical Systems Analysis: CSA - functional safety engineering · Company directory · FSTalent - functional safety jobs