logo

AnyCubic fixes exploited 3D printer zero day flaw with new firmware

ID: 2afe2aae-edf2-5546-ace3-9607b043e2bc

STIX ID: report--2afe2aae-edf2-5546-ace3-9607b043e2bc

Feed Name: Bleeping Computer

Threat Score
60/100

Date Published: 2024-03-07

Date Updated: 2026-04-20

Author: Lawrence Abrams

...
...

A zero-day in AnyCubic Kobra 2/Pro/Plus/Max printers' cloud/MQTT service allowed attackers to connect using valid credentials and queue a G-code file that printed a warning message on affected printers; multiple users reported the activity worldwide. Researchers claim they repeatedly attempted to notify AnyCubic before exploiting the flaw to warn owners; AnyCubic released firmware on March 5 to strengthen MQTT authorization and provided mitigation steps including disabling Wi‑Fi.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.