{"vulnerability": "CVE-2026-76639", "sightings": [{"uuid": "d3f427ad-c7c1-4c76-90f8-2103344a978f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76639", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mu55rtsuk62c", "content": "\ud83d\udce2 UniBLEed : RCE root non authentifi\u00e9 sur robot humano\u00efde Unitree G1 via BLE (CVE-2026-76639/76640)\n\nCet article constitue une analyse technique exhaustive (~85 min de lecture) de deux cha\u00eenes d'exploitation critiques\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#UnitreeG1 #RobotHumano\u00efde #Cyberveille", "creation_timestamp": "2026-08-28T10:30:06.880648Z"}, {"uuid": "e6b50fdb-c287-40c4-afad-83324c3e028d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76639", "type": "seen", "source": "https://t.me/GithubRedTeam/99549", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a UniBLEed\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a OlivierLaflamme\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 21:23:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnitree G1 RCE PoC & Scripts (CVE-2026-76639 / CVE-2026-76640) technical details at boschko.ca/g1-ble-rce/\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-25T19:00:04.406772Z"}, {"uuid": "37372dfb-8f88-4d52-a27d-b1ae458a8a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76639", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99549", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a UniBLEed\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a OlivierLaflamme\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 21:23:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnitree G1 RCE PoC & Scripts (CVE-2026-76639 / CVE-2026-76640) technical details at boschko.ca/g1-ble-rce/\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-26T00:00:09.103329Z"}, {"uuid": "890c72cb-7248-45ee-8a71-5bd028acd5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76639", "type": "published-proof-of-concept", "source": "Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI", "content": "", "creation_timestamp": "2026-08-26T00:00:10.712524Z"}, {"uuid": "a738e1ba-6e1d-4b96-8446-60d17a1dc76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76639", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mu5gyx6aad2l", "content": "Two independent root RCE chains affect the Unitree G1 EDU, including a BLE path to root on the Locomotion PC, tracked as CVE-2026-76639 and CVE-2026-76640.\n", "creation_timestamp": "2026-08-28T13:15:09.466024Z"}, {"uuid": "a682e734-4e09-49e3-951a-6976d2d5f219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76639", "type": "published-proof-of-concept", "source": "Telegram/MFt61SkAsLaprfOBakMO1eyKaH6ILKietM4XZZBHzMsRjGI", "content": "", "creation_timestamp": "2026-08-25T11:00:03.490805Z"}]}