CVE-2025-13819: Mir Fleet

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks.

Affected products

• Mir Fleet: before 3.7.0 (fixed in 3.7.0)
• Mir Robot: before 3.7.0 (fixed in 3.7.0)

Published 2025-12-01. Last modified 2026-06-17.