VARIoT latest news about IoT security

Critical VoIP Security Alert: Grandstream GXP1600 Phones Exposed to Remote Code Execution Risk - Cybersecurity \| COE Security Trust: 5.0 Fetched: Feb. 27, 2026, 9:43 a.m., Published: Feb. 23, 2026, 1:42 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:

grandstream

model:

gxp1600

Juniper PTX Routers at Risk as Critical Vulnerability Enables Full Device Takeover Trust: 3.25 Fetched: Feb. 27, 2026, 9:42 a.m., Published: Feb. 27, 2026, 7:19 a.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2026-21902

Critical RCE flaw in Zyxel routers puts users at risk \| DigitrendZ Trust: 5.0 Fetched: Feb. 27, 2026, 9:42 a.m., Published: Feb. 26, 2026, 11:08 p.m.	Vulnerabilities: command execution, command injection

Affected products

External IDs

db:

NVD

ids:

CVE-2025-13942, CVE-2024-40892, CVE-2025-13943, CVE-2026-1459, CVE-2024-40891

CVE-2026-20764 - Copeland XWEB and XWEB Pro OS Command Injection Trust: 4.0 Fetched: Feb. 27, 2026, 9:42 a.m., Published: Feb. 27, 2026, 2:16 a.m.	Vulnerabilities: os command injection, code execution, command injection

Affected products

External IDs

db:

NVD

ids:

CVE-2026-20764

Cisco Nexus 3600 and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability Trust: 5.0 Fetched: Feb. 27, 2026, 9:41 a.m., Published: Feb. 25, 2026, 3:59 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	nx-os software
vendor:	cisco	model:	mds 9000
vendor:	cisco	model:	series switches
vendor:	cisco	model:	nexus 9000 series
vendor:	cisco	model:	nexus
vendor:	cisco	model:	nexus 9000
vendor:	cisco	model:	firepower 9300
vendor:	cisco	model:	nx-os
vendor:	cisco	model:	series
vendor:	cisco	model:	firepower 2100
vendor:	cisco	model:	nexus 3000
vendor:	cisco	model:	firepower
vendor:	cisco	model:	cisco nx-os
vendor:	cisco	model:	nexus 7000
vendor:	cisco	model:	mds 9000 series

Cisco UCS Manager Software Privilege Escalation Vulnerability Trust: 4.0 Fetched: Feb. 27, 2026, 9:41 a.m., Published: Feb. 25, 2026, 3:59 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	cisco	model:	cisco ucs manager
vendor:	cisco	model:	ucs manager
vendor:	cisco	model:	series

CVE-2026-20010 - Cisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service Vulnerability Trust: 6.75 Fetched: Feb. 27, 2026, 9:40 a.m., Published: Feb. 25, 2026, 5:25 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	nx-os software
vendor:	cisco	model:	cisco nx-os
vendor:	cisco	model:	nexus 3000
vendor:	cisco	model:	series switches
vendor:	cisco	model:	nx-os
vendor:	cisco	model:	series
vendor:	cisco	model:	link layer discovery protocol
vendor:	cisco	model:	nexus

db:

NVD

ids:

CVE-2026-20010

Juniper Networks PTX Vulnerability Enables Full Router Takeover Trust: 4.25 Fetched: Feb. 27, 2026, 9:40 a.m., Published: Feb. 27, 2026, 8:55 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2026-21902

Attackers Have Been Exploiting Cisco SD-WAN Zero-Day Flaw Since 2023 - Security Boulevard Trust: 3.0 Fetched: Feb. 27, 2026, 9:39 a.m., Published: Feb. 26, 2026, 10:22 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	sd-wan
vendor:	cisco	model:	cisco sd-wan

CVE-2026-20048 - Cisco NX-OS Software SNMP Denial of Service Vulnerability Trust: 5.75 Fetched: Feb. 27, 2026, 9:38 a.m., Published: Feb. 25, 2026, 5:25 p.m.	Vulnerabilities: denial of service, kernel panic

Affected products

External IDs

vendor:	cisco	model:	nx-os software
vendor:	cisco	model:	cisco nx-os
vendor:	cisco	model:	nexus 9000
vendor:	cisco	model:	nexus 9000 series
vendor:	cisco	model:	cisco nexus 9000 series
vendor:	cisco	model:	nx-os
vendor:	cisco	model:	series
vendor:	cisco	model:	nexus

db:

NVD

ids:

CVE-2026-20048

Cisco NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability Trust: 4.0 Fetched: Feb. 27, 2026, 9:37 a.m., Published: Feb. 25, 2026, 3:59 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	nx-os software
vendor:	cisco	model:	mds 9000
vendor:	cisco	model:	series switches
vendor:	cisco	model:	ucs manager
vendor:	cisco	model:	nexus 9000 series
vendor:	cisco	model:	nexus
vendor:	cisco	model:	nexus 9000
vendor:	cisco	model:	firepower 9300
vendor:	cisco	model:	cisco ucs manager
vendor:	cisco	model:	cisco nexus 9000 series
vendor:	cisco	model:	nx-os
vendor:	cisco	model:	series
vendor:	cisco	model:	firepower 2100
vendor:	cisco	model:	nexus 3000
vendor:	cisco	model:	link layer discovery protocol
vendor:	cisco	model:	firepower
vendor:	cisco	model:	cisco nx-os
vendor:	cisco	model:	nexus 7000
vendor:	cisco	model:	mds 9000 series

Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability Trust: 5.0 Fetched: Feb. 27, 2026, 9:37 a.m., Published: Feb. 25, 2026, 3:59 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	cisco application policy infrastructure controller
vendor:	cisco	model:	application policy infrastructure controller

Critical Zyxel router flaw exposed devices to remote attacks Trust: 5.0 Fetched: Feb. 27, 2026, 9:36 a.m., Published: Feb. 25, 2026, 8:28 p.m.	Vulnerabilities: command execution, code execution, command injection

Affected products

External IDs

db:

NVD

ids:

CVE-2025-13942, CVE-2025-11848, CVE-2025-11846, CVE-2025-11847, CVE-2025-11845, CVE-2025-13943, CVE-2026-1459

Mixed Vulnerability and Exploit Paths \| random-robbie/bruteforce-lists \| DeepWiki Related entries in the VARIoT vulnerabilities database: VAR-201205-0305 Trust: 6.25 Fetched: Feb. 27, 2026, 9:35 a.m., Published: Feb. 26, 2026, midnight	Vulnerabilities: path traversal, command injection, parameter injection...

Affected products

External IDs

vendor:	polycom	model:	vvx 500
vendor:	yealink	model:	voip phone
vendor:	filezilla	model:	server
vendor:	axis	model:	axis
vendor:	axis	model:	ip cameras
vendor:	d-link	model:	router
vendor:	netgear	model:	router
vendor:	huawei	model:	nice
vendor:	huawei	model:	huawei

db:

NVD

ids:

CVE-2012-1823, CVE-2018-7600, CVE-2018-20062

Cisco UCS Manager Software Command Injection Vulnerability Trust: 4.0 Fetched: Feb. 27, 2026, 9:34 a.m., Published: Feb. 25, 2026, 3:59 p.m.	Vulnerabilities: command injection

Affected products

External IDs

vendor:	cisco	model:	cisco ucs manager
vendor:	cisco	model:	ucs manager
vendor:	cisco	model:	series

Active exploitation of Cisco Catalyst SD-WAN by UAT-8616 Related entries in the VARIoT vulnerabilities database: VAR-202602-3258, VAR-202209-1914 Trust: 4.5 Fetched: Feb. 27, 2026, 9:34 a.m., Published: Feb. 25, 2026, 4:13 p.m.	Vulnerabilities: path traversal

Affected products

External IDs

vendor:	cisco	model:	sd-wan
vendor:	cisco	model:	catalyst
vendor:	cisco	model:	vedge
vendor:	trend	model:	security
vendor:	snort	model:	snort

db:

NVD

ids:

CVE-2026-20127, CVE-2022-20775

Cisco Nexus 9000 Series Fabric Switches in ACI Mode SNMP Denial of Service Vulnerability Trust: 4.0 Fetched: Feb. 27, 2026, 9:33 a.m., Published: Feb. 25, 2026, 3:59 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	cisco application policy infrastructure controller
vendor:	cisco	model:	mds 9000
vendor:	cisco	model:	series switches
vendor:	cisco	model:	nexus 9000 series
vendor:	cisco	model:	nexus
vendor:	cisco	model:	nexus 9000
vendor:	cisco	model:	firepower 9300
vendor:	cisco	model:	cisco nexus 9000 series
vendor:	cisco	model:	nx-os
vendor:	cisco	model:	series
vendor:	cisco	model:	application policy infrastructure controller
vendor:	cisco	model:	firepower 2100
vendor:	cisco	model:	nexus 3000
vendor:	cisco	model:	firepower
vendor:	cisco	model:	nexus 7000
vendor:	cisco	model:	mds 9000 series

Cisco Nexus 9000 Series Fabric Switches in ACI Mode Denial of Service Vulnerability Trust: 5.0 Fetched: Feb. 27, 2026, 9:33 a.m., Published: Feb. 25, 2026, 3:59 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	nx-os software
vendor:	cisco	model:	series switches
vendor:	cisco	model:	nexus 9000 series
vendor:	cisco	model:	nexus
vendor:	cisco	model:	nexus 9000
vendor:	cisco	model:	cisco nexus 9000 series
vendor:	cisco	model:	nx-os
vendor:	cisco	model:	series
vendor:	cisco	model:	nexus 3000
vendor:	cisco	model:	cisco nx-os
vendor:	cisco	model:	nexus 7000

CVE-2026-20127 - Cisco Catalyst Zero-Day Vulnerability \| eSentire Related entries in the VARIoT vulnerabilities database: VAR-202602-3258, VAR-202209-1914 Trust: 5.0 Fetched: Feb. 27, 2026, 9:32 a.m., Published: Feb. 25, 2026, midnight	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	cisco	model:	threat response
vendor:	cisco	model:	sd-wan vmanage
vendor:	cisco	model:	sd-wan
vendor:	cisco	model:	wan manager
vendor:	cisco	model:	routers
vendor:	cisco	model:	cisco sd-wan
vendor:	cisco	model:	catalyst

db:

NVD

ids:

CVE-2026-20127, CVE-2022-20775

CVE-2026-20127: Cisco Catalyst SD-WAN Controller/Manager Zero-Day Authentication Bypass Vulnerability Exploited in the Wild - Security Boulevard Related entries in the VARIoT vulnerabilities database: VAR-202602-3258 Trust: 5.0 Fetched: Feb. 27, 2026, 9:32 a.m., Published: Feb. 25, 2026, 6:51 p.m.	Vulnerabilities: authentication bypass

Affected products

External IDs

vendor:	cisco	model:	sd-wan
vendor:	cisco	model:	catalyst

db:

NVD

ids:

CVE-2026-20127

VARIoT news about IoT security