Sign-up

VARIoT news about IoT security

Latest news

The news are found with our scripts for filtering search results.
Additional information about vulnerabilities, affected products and external identifiers are obtained with NLP and custom filters from found news.

APT28 Uses Microsoft Office CVE-2026-21509 in Espionage-Focused Malware Attacks

Trust: 3.5

Fetched: Feb. 22, 2026, 9:38 a.m., Published: Feb. 3, 2026, 9:12 a.m.
 Vulnerabilities: feature bypass, security feature bypass
Affected productsExternal IDs
db: NVD ids: CVE-2026-21509

AI-assisted hacker compromises 600+ FortiGate devices across 55 countries

Trust: 3.0

Fetched: Feb. 22, 2026, 9:38 a.m., Published: Feb. 22, 2055, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-27532, CVE-2024-40711

Update Canonical Ubuntu Desktop: USN-8046-1: FRR vulnerabilities

Trust: 4.25

Fetched: Feb. 22, 2026, 9:37 a.m., Published: Jan. 22, 8046, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

Edge 145 Rolls Out with Password Upgrades and Security Patches

Trust: 5.5

Fetched: Feb. 22, 2026, 9:37 a.m., Published: Feb. 19, 2026, 11:24 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2026-26119, CVE-2026-0102

Update Canonical Ubuntu Desktop: USN-8028-5: Linux kernel vulnerabilities

Trust: 3.25

Fetched: Feb. 22, 2026, 9:36 a.m., Published: May 22, 8028, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Update Canonical Ubuntu Desktop: USN-8048-1: Linux kernel (OEM) vulnerabilities

Trust: 3.25

Fetched: Feb. 22, 2026, 9:35 a.m., Published: Jan. 22, 8048, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Update Canonical Ubuntu Desktop: USN-8042-1: FreeRDP vulnerabilities

Trust: 5.75

Fetched: Feb. 22, 2026, 9:34 a.m., Published: Jan. 22, 8042, midnight
 Vulnerabilities: denial of service, buffer overflow, use after free
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2026-24678, CVE-2026-24679, CVE-2026-24676, CVE-2026-24491, CVE-2026-24677, CVE-2026-24681, CVE-2026-23948, CVE-2026-24684, CVE-2026-24683, CVE-2026-24675, CVE-2026-24682, CVE-2026-24680

Update Canonical Ubuntu Desktop: USN-8043-1: GnuTLS vulnerabilities

Trust: 6.25

Fetched: Feb. 22, 2026, 9:34 a.m., Published: Jan. 22, 8043, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2025-14831, CVE-2025-9820

Update Canonical Ubuntu Desktop: USN-8028-4: Linux kernel (FIPS) vulnerabilities

Trust: 3.25

Fetched: Feb. 22, 2026, 9:34 a.m., Published: April 22, 8028, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via device Parameter | Advisories | VulnCheck

Trust: 4.25

Fetched: Feb. 22, 2026, 9:33 a.m., Published: Feb. 7, 2000, midnight
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: comodo model: firewall

Texas Sues TP-Link Over Alleged Security Risks and Supply Chain Deception | eSecurity Planet

Trust: 3.75

Fetched: Feb. 22, 2026, 9:33 a.m., Published: Feb. 19, 2026, 8:34 p.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: tp-link model: routers
vendor: tp link model: routers

CISA Alert: Honeywell CCTV Authentication Bypass Vulnerability | Luis Oria Seidel posted on the topic | LinkedIn

Trust: 3.0

Fetched: Feb. 22, 2026, 9:31 a.m., Published: -
 Vulnerabilities: authentication bypass
Affected productsExternal IDs

Cyber Threats Intensify Across Global Health Sector

Trust: 3.75

Fetched: Feb. 22, 2026, 9:31 a.m., Published: Feb. 17, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

TP-Link Router Vulnerabilities Exposed | Enigma Security posted on the topic | LinkedIn

Trust: 4.0

Fetched: Feb. 22, 2026, 9:29 a.m., Published: -
 Vulnerabilities: command injection, authentication bypass, default credentials
Affected productsExternal IDs
vendor: tp-link model: routers

ZLAN Information Technology Co. ZLAN5143D | CISA

Trust: 3.0

Fetched: Feb. 22, 2026, 9:28 a.m., Published: Feb. 1, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-25084, CVE-2026-24789

Microsoft Windows 10 Security Vulnerabilities in 2026

Trust: 3.75

Fetched: Feb. 22, 2026, 9:27 a.m., Published: Feb. 10, 2026, midnight
 Vulnerabilities: buffer overflow, denial of service, use after free...
Affected productsExternal IDs
db: NVD ids: CVE-2020-0569, CVE-2021-42297, CVE-2021-36945, CVE-2021-43211

The Phone is Listening: A Cold War-Style Vulnerability in Modern VoIP

Trust: 5.75

Fetched: Feb. 22, 2026, 9:27 a.m., Published: Feb. 18, 2026, midnight
 Vulnerabilities: denial of service, buffer overflow, memory corruption
Affected productsExternal IDs
vendor: grandstream model: gxp1600
db: NVD ids: CVE-2026-2329

Critical Vulnerabilities in Ivanti EPMM Exploited

Trust: 4.25

Fetched: Feb. 22, 2026, 9:26 a.m., Published: Feb. 20, 2026, 5:49 p.m.
 Vulnerabilities: code execution, code injection
Affected productsExternal IDs
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
vendor: palo model: firewall
vendor: palo model: networks
db: NVD ids: CVE-2026-1281, CVE-2026-12821, CVE-2026-1340

Selective Thread Emulation and Fuzzing Expose DoS Flaws in Socomec DIRIS M-70 IIoT Device - Simply Secure Group

Related entries in the VARIoT vulnerabilities database: VAR-202512-0005, VAR-202512-0006, VAR-202512-0007, VAR-202512-0182, VAR-202512-0181, VAR-202512-0008

Trust: 4.75

Fetched: Feb. 22, 2026, 9:25 a.m., Published: Feb. 22, 2070, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: snort model: snort
vendor: snort.org model: snort
db: NVD ids: CVE-2025-54850, CVE-2025-54849, CVE-2025-54848, CVE-2025-55221, CVE-2025-55222, CVE-2025-54851

Notepad++ Fixes Hijacked Update Mechanism Used to Deliver Targeted Malware

Trust: 5.5

Fetched: Feb. 22, 2026, 9:20 a.m., Published: Feb. 18, 2026, 7:40 a.m.
 Vulnerabilities: search path vulnerability, code execution
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo model: networks
db: NVD ids: CVE-2026-25926, CVE-2025-15556