Sign-up

VARIoT news about IoT security

CVE-2026-0715 - Moxa Arm-based Industrial Computers Bootloader Access Vulnerability

Trust: 4.25

Fetched: Feb. 6, 2026, 9:34 a.m., Published: Feb. 5, 2026, 5:16 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2026-0715, CVE-2026-0714

Microsoft Patch Tuesday January 2026 Fixes 114 Vulnerabilities, Including 3 Zero-Days

Trust: 4.5

Fetched: Feb. 6, 2026, 9:33 a.m., Published: Jan. 14, 2026, 7:35 a.m.
 Vulnerabilities: code execution, security feature bypass, feature bypass...
Affected productsExternal IDs
vendor: motorola model: motorola
db: NVD ids: CVE-2026-20827, CVE-2026-20875, CVE-2026-20952, CVE-2026-20811, CVE-2026-20851, CVE-2026-20940, CVE-2026-20937, CVE-2026-20948, CVE-2026-20831, CVE-2026-20932, CVE-2026-20817, CVE-2023-31096, CVE-2026-20926, CVE-2026-20861, CVE-2026-20931, CVE-2026-20863, CVE-2026-20953, CVE-2026-20830, CVE-2026-20944, CVE-2026-20876, CVE-2026-21221, CVE-2026-20868, CVE-2026-20835, CVE-2026-20946, CVE-2026-20859, CVE-2026-20833, CVE-2026-20869, CVE-2026-20936, CVE-2026-20921, CVE-2026-20957, CVE-2026-20838, CVE-2026-21265, CVE-2026-20812, CVE-2026-20927, CVE-2026-20962, CVE-2026-20823, CVE-2026-20810, CVE-2026-20825, CVE-2026-20853, CVE-2026-0386, CVE-2026-20842, CVE-2026-20857, CVE-2026-21219, CVE-2026-20826, CVE-2026-20860, CVE-2026-20870, CVE-2026-20819, CVE-2026-20847, CVE-2026-20920, CVE-2026-20809, CVE-2026-20829, CVE-2026-20843, CVE-2026-20832, CVE-2026-20924, CVE-2026-20808, CVE-2026-20805, CVE-2024-55414, CVE-2026-20834, CVE-2026-20956, CVE-2026-20848, CVE-2026-20836, CVE-2026-20934, CVE-2026-20865, CVE-2026-20849, CVE-2026-20866, CVE-2026-20874, CVE-2026-20929, CVE-2026-20872, CVE-2026-20864, CVE-2026-20822, CVE-2026-20814, CVE-2026-20943, CVE-2026-20871, CVE-2026-20854, CVE-2026-20922, CVE-2026-20844, CVE-2026-20873, CVE-2026-20867, CVE-2026-20820, CVE-2026-20919, CVE-2026-20815, CVE-2026-20939, CVE-2026-20840, CVE-2026-20816, CVE-2026-20955, CVE-2026-20918, CVE-2026-20925, CVE-2026-20935, CVE-2026-20803, CVE-2026-20938, CVE-2026-20862, CVE-2026-21224, CVE-2026-20947, CVE-2026-20824, CVE-2026-20821, CVE-2026-20856, CVE-2026-20858, CVE-2026-20839, CVE-2026-20923, CVE-2026-20877, CVE-2026-20828, CVE-2026-20965, CVE-2026-20958, CVE-2026-20804, CVE-2026-20837, CVE-2026-20951, CVE-2026-20818, CVE-2026-20852

Analysis Guidance Ivanti Endpoint Manager Mobile (EPMM) CVE-2026-1281 & CVE-2026-1340

Trust: 5.0

Fetched: Feb. 6, 2026, 9:32 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2026-1340, CVE-2026-1281

Command Execution Vulnerability in Some Hikvision Wireless Access Point Products - Security Advisory - Hikvision Global

Trust: 4.0

Fetched: Feb. 6, 2026, 9:32 a.m., Published: Feb. 3, 2026, midnight
 Vulnerabilities: command execution
Affected productsExternal IDs
vendor: hikvision model: hikvision

Zyxel security advisory for post-authentication command injection vulnerability in the DDNS configuration CLI command of ZLD firewalls | Zyxel Networks

Trust: 5.0

Fetched: Feb. 6, 2026, 9:31 a.m., Published: Feb. 7, 2026, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-11730

CyRC Discovers Critical WLAN Vulnerabilities in ASUS and TP-Link Routers (CVE-2025-14631) | Black Duck Blog

Trust: 3.75

Fetched: Feb. 6, 2026, 9:24 a.m., Published: Jan. 13, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: asus model: routers
vendor: asus model: asus
vendor: tp-link model: routers
db: NVD ids: CVE-2025-14631

Multiple TP-Link OS Command Injection Vulnerabilities Let Attackers Gain

Trust: 4.5

Fetched: Feb. 6, 2026, 9:24 a.m., Published: Feb. 5, 2026, 10:17 a.m.
 Vulnerabilities: command execution, os command injection, command injection...
Affected productsExternal IDs
vendor: wireshark model: wireshark
vendor: tp-link model: routers

Critical WatchGuard VPN Client Flaw Enables SYSTEM-Level Command Execution on Windows

Trust: 3.0

Fetched: Feb. 6, 2026, 9:23 a.m., Published: Feb. 3, 2026, midnight
 Vulnerabilities: privilege escalation, command execution
Affected productsExternal IDs

CVE-2026-20045 - Critical Remote Command Execution Vulnerability in Multiple Cisco Unified Communications Products

Trust: 4.5

Fetched: Feb. 6, 2026, 9:22 a.m., Published: Jan. 21, 2026, 4:26 p.m.
 Vulnerabilities: privilege escalation, command execution, improper validation
Affected productsExternal IDs
vendor: cisco model: unified communications
vendor: cisco model: cisco webex
vendor: cisco model: webex
db: NVD ids: CVE-2026-20045

Multiple TP-Link OS Command Injection Flaws Allow Attackers to Gain Admin Control

Trust: 5.75

Fetched: Feb. 6, 2026, 9:22 a.m., Published: Feb. 4, 2026, 1:26 p.m.
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs
vendor: google model: home
db: NVD ids: CVE-2026-22227, CVE-2026-22222, CVE-2026-22225, CVE-2026-22229, CVE-2026-22221, CVE-2026-22223, CVE-2026-0631, CVE-2026-0630, CVE-2026-22224, CVE-2026-22226

CVE-2026-24858: The vulnerability exposing your Fortinet gear

Trust: 4.25

Fetched: Feb. 6, 2026, 9:20 a.m., Published: Feb. 1, 2026, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2026-24858

Understanding Is Predictability: A Better Model for Vulnerability Management

Trust: 3.0

Fetched: Feb. 6, 2026, 9:19 a.m., Published: Feb. 3, 2026, midnight
 Vulnerabilities: sql injection
Affected productsExternal IDs

Multiple TP-Link OS Command Injection Vulnerabilities Let Attackers Gain Admin Control of the Device

Trust: 6.0

Fetched: Feb. 6, 2026, 9:19 a.m., Published: Feb. 5, 2026, 2:07 a.m.
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs
vendor: tp-link model: routers
db: NVD ids: CVE-2026-22227, CVE-2026-22222, CVE-2026-22225, CVE-2026-22229, CVE-2026-22221, CVE-2026-22223, CVE-2026-0631, CVE-2026-0630, CVE-2026-22224, CVE-2026-22226

Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability

Trust: 5.0

Fetched: Feb. 6, 2026, 9:18 a.m., Published: Feb. 4, 2026, 3:55 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: telepresence ce
vendor: cisco model: cisco telepresence
vendor: cisco model: cisco telepresence ce software
vendor: cisco model: telepresence
vendor: cisco model: telepresence ce software
vendor: cisco model: telepresence collaboration endpoint
vendor: cisco model: roomos
vendor: cisco model: cisco roomos

CVE-2026-24061 - GNU InetUtils telnetd Authentication Bypass Vulnerability

Trust: 4.75

Fetched: Feb. 6, 2026, 9:18 a.m., Published: Jan. 30, 2026, 4:15 p.m.
 Vulnerabilities: code execution, service disruption, authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2026-24061

Critical ASUSTOR NAS Security Flaw Enables Complete Device Takeover

Trust: 4.0

Fetched: Feb. 6, 2026, 9:18 a.m., Published: Feb. 4, 2026, 11:09 a.m.
 Vulnerabilities: input validation vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2026-24936

Reset your Android device to factory settings - Android Help

Trust: 3.0

Fetched: Feb. 6, 2026, 9:13 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Access Denied

Trust: 3.25

Fetched: Feb. 4, 2026, 9:33 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome

Telegram Vulnerability Exposed: Authentication Flaw | Enigma Security posted on the topic | LinkedIn

Trust: 5.25

Fetched: Feb. 4, 2026, 9:32 a.m., Published: -
 Vulnerabilities: authentication flaw
Affected productsExternal IDs
vendor: wireshark model: wireshark

Update Canonical Ubuntu Desktop: USN-7993-1: libpng vulnerabilities

Trust: 4.25

Fetched: Feb. 4, 2026, 9:32 a.m., Published: Jan. 4, 7993, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu