Sign-up

VARIoT news about IoT security

Latest news

The news are found with our scripts for filtering search results.
Additional information about vulnerabilities, affected products and external identifiers are obtained with NLP and custom filters from found news.

Surface Laptop 5 gets new (November 25, 2025) firmware updates

Trust: 3.75

Fetched: Nov. 26, 2025, 9:17 a.m., Published: Nov. 25, 2025, midnight
 Vulnerabilities: denial of service, application crash, information disclosure...
Affected productsExternal IDs
db: NVD ids: CVE-2024-21864, CVE-2022-36392, CVE-2022-38102, CVE-2024-44074

Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability

Trust: 4.0

Fetched: Nov. 26, 2025, 9:17 a.m., Published: Nov. 6, 2025, 3:50 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: series
vendor: cisco model: asa 5500
vendor: cisco model: asa software
vendor: cisco model: adaptive security appliance software
vendor: cisco model: adaptive security appliance

General Industrial Controls Lynx+ Gateway | CISA

Trust: 5.0

Fetched: Nov. 25, 2025, 9:42 a.m., Published: Nov. 1, 2025, midnight
 Vulnerabilities: weak password
Affected productsExternal IDs
db: NVD ids: CVE-2025-55034, CVE-2025-62765, CVE-2025-58083, CVE-2025-59780

The Hidden Risk of Device Sprawl: Why More Devices Mean More Exposure

Trust: 3.0

Fetched: Nov. 25, 2025, 9:41 a.m., Published: Nov. 3, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Update Canonical Ubuntu Server: USN-7878-1: cups-filters vulnerabilities

Trust: 4.5

Fetched: Nov. 25, 2025, 9:41 a.m., Published: Jan. 25, 7878, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cups model: cups
vendor: canonical model: ubuntu
db: NVD ids: CVE-2025-64503, CVE-2025-57812, CVE-2025-64524

Update Canonical Ubuntu Server: USN-7877-1: libcupsfilters vulnerabilities

Trust: 6.25

Fetched: Nov. 25, 2025, 9:40 a.m., Published: Jan. 25, 7877, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2025-64503, CVE-2025-57812

Update Canonical Ubuntu Server: USN-7861-3: Linux kernel vulnerabilities

Trust: 4.25

Fetched: Nov. 25, 2025, 9:39 a.m., Published: March 25, 7861, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2025-40300

Update Canonical Ubuntu Desktop: USN-7886-1: Python vulnerabilities

Trust: 5.0

Fetched: Nov. 25, 2025, 9:39 a.m., Published: Jan. 25, 7886, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2025-8291, CVE-2025-6075

Update Canonical Ubuntu Server: USN-7879-1: Linux kernel vulnerabilities

Trust: 3.25

Fetched: Nov. 25, 2025, 9:39 a.m., Published: Jan. 25, 7879, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

CISA: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities - Cyber Security Review

Trust: 3.75

Fetched: Nov. 25, 2025, 9:38 a.m., Published: Nov. 12, 2025, 8:46 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: nexus
vendor: cisco model: firepower
db: NVD ids: CVE-2025-41244, CVE-2025-53770, CVE-2025-20362, CVE-2025-20333

Tenda N300 Vulnerabilities Let Attacker to Execute Arbitrary Commands as Root User

Related entries in the VARIoT vulnerabilities database: VAR-202305-0900

Trust: 5.75

Fetched: Nov. 25, 2025, 9:37 a.m., Published: Nov. 24, 2025, 1:36 p.m.
 Vulnerabilities: code execution, command execution, command injection
Affected productsExternal IDs
vendor: tenda model: router
db: NVD ids: CVE-2023-2649, CVE-2025-13207, CVE-2024-24481

CE-Cyber Delegated Act: What IoT Manufacturers Need to Do Before Enforcement - IoT Business News

Trust: 3.75

Fetched: Nov. 25, 2025, 9:36 a.m., Published: Nov. 24, 2025, 8:25 a.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs

Microsoft Update Health Tools Vulnerability Lets Attackers Run Remote Code

Trust: 4.0

Fetched: Nov. 25, 2025, 9:35 a.m., Published: Nov. 25, 2025, 5:39 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Meta Expands WhatsApp Security Research with New Proxy Tool and $4M in Bounties This Year

Trust: 4.5

Fetched: Nov. 25, 2025, 9:30 a.m., Published: Nov. 18, 2025, 3:56 p.m.
 Vulnerabilities: code execution, resource exhaustion
Affected productsExternal IDs
db: NVD ids: CVE-2025-59489

Qualcomm confirms security vulnerability; Samsung, Apple devices affected

Trust: 4.5

Fetched: Nov. 25, 2025, 9:29 a.m., Published: Nov. 3, 2025, midnight
 Vulnerabilities: code execution, memory corruption, privilege escalation
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
vendor: oneplus model: oneplus
vendor: oneplus model: 3
vendor: samsung model: samsung
db: NVD ids: CVE-2024-43047

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: Nov. 25, 2025, 9:29 a.m., Published: -
 Vulnerabilities: configuration error
Affected productsExternal IDs

CVE-2025-40591: Command Injection Vulnerability in RUGGEDCOM ROX Devices - Ameeba Exploit Tracker

Trust: 4.0

Fetched: Nov. 25, 2025, 9:29 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-40591

Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild

Trust: 5.5

Fetched: Nov. 25, 2025, 9:28 a.m., Published: Nov. 19, 2025, 4:20 a.m.
 Vulnerabilities: code execution, command injection, os command injection...
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2025-58034, CVE-2025-64446

SonicWall SSLVPN Vulnerability CVE-2025-40601 - TheCyberThrone

Trust: 5.5

Fetched: Nov. 25, 2025, 9:28 a.m., Published: Nov. 23, 2025, 4:07 p.m.
 Vulnerabilities: path traversal, buffer overflow, authentication bypass...
Affected productsExternal IDs
vendor: sonicwall model: sonicos
vendor: sonicwall model: ssl-vpn
vendor: sonicwall model: sma 100
vendor: palo model: networks
vendor: palo model: pan-os
vendor: palo model: firewall
vendor: palo alto networks model: networks
vendor: palo alto networks model: pan-os
vendor: palo alto networks model: firewall
db: NVD ids: CVE-2025-32818, CVE-2025-0108, CVE-2025-40601

Tracking RondoDox: Malware Exploiting Many IoT Vulnerabilities | F5 Labs

Related entries in the VARIoT vulnerabilities database: VAR-202203-0233, VAR-202001-0839, VAR-202411-0293, VAR-202504-3437, VAR-202212-1132, VAR-201802-0135, VAR-202303-1268, VAR-202007-0064, VAR-202003-1707

Trust: 5.0

Fetched: Nov. 25, 2025, 9:26 a.m., Published: Nov. 24, 2025, 5:47 p.m.
 Vulnerabilities: os command injection, code execution, code injection...
Affected productsExternal IDs
vendor: google model: home
vendor: netgear model: router
vendor: tenda model: router
vendor: tenda model: ac15
vendor: tenda model: ac15 ac1900
vendor: d-link model: dir
vendor: d-link model: router
vendor: cisco model: linksys
vendor: cisco model: routers
vendor: cisco model: router
vendor: cisco model: series
vendor: motorola model: motorola
vendor: fortigate model: fortios
vendor: tp-link model: routers
vendor: tp-link model: gateway
db: NVD ids: CVE-2022-22947, CVE-2013-1599, CVE-2024-10914, CVE-2025-31324, CVE-2023-1381, CVE-2020-8958, CVE-2022-42475, CVE-2025-34043, CVE-2022-40619, CVE-2025-9528, CVE-2023-41011, CVE-2024-4577, CVE-2022-36553, CVE-2014-3206, CVE-2025-4008, CVE-2024-3721, CVE-2019-9082, CVE-2023-23333, CVE-2023-1389, CVE-2020-10987, CVE-2022-24847, CVE-2017-9841, CVE-2020-9054