Pollen Robotics Reachy Mini

• CVE-2026-96456 Medium 6.3 Reachy Mini Bluetooth PIN authentication can be bypassed by racing an authenticated device 0.2%
• CVE-2026-96455 High 8.8 Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint 0.3%
• CVE-2026-55419 Medium 5.3 Reachy Mini: Unrestricted Upload of File with Dangerous Type 0.5%