What is CVE-2026-12990?
An access control vulnerability in Ghost Robotics' Vision 60 mobile app (APK v5.5.0) allows multiple simultaneous sessions without proper client validation or session integrity checks, enabling an attacker to connect during an active legitimate session.
Azərbaycanca: Ghost Robotics-in Vision 60 robotunun mobil tətbiqində (APK v5.5.0) aşkarlanmış access control zəifliyi, eyni vaxtda birdən çox sessiyanın düzgün yoxlanılmadan işləməsinə imkan verir. Bu, təcavüzkara aktiv, legitim istifadəçi sessiyası zamanı robotla əlaqə yaratmağa şərait yaradır.
Related CVEs
link basis: same weakness class CWE-284
FAQ1
What does the CVE-2026-12990 vulnerability in the Ghost Robotics Vision 60 mobile app allow?
CVE-2026-12990 is an access control vulnerability in Vision 60's APK v5.5.0 that allows multiple simultaneous sessions without proper client validation or session integrity checks, enabling an attacker to connect during an active legitimate session.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.