SpaceX
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Starlink Dish | 1 | – | Dec 11, 2025 |
| Starlink Router Gen 3 | 1 | – | Aug 15, 2026 |
Exploited and recent CVEs
- CVE-2026-19918 SpaceX Starlink Router Gen 3 gRPC Management get_status access control 0.3%
- CVE-2025-67780 SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 (e.g., on Mini1_prod2) allow administrative actions via unauthenticated LAN gRPC requests, aka MARMALADE 2. The cross-origin policy can be 0.2%