Sign-up

VARIoT news about IoT security

Apple releases urgent security update for iPhone iPad Mac zero-day flaw | Fox News

Trust: 4.5

Fetched: Feb. 18, 2026, 9:20 a.m., Published: Feb. 18, 2025, midnight
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: apple tv
vendor: apple model: watch
vendor: apple model: macos
vendor: apple model: safari
vendor: apple model: ipad
vendor: apple model: software update
db: NVD ids: CVE-2026-20700

FortiGate SSO bug still exploitable despite December patch • The Register

Trust: 4.75

Fetched: Feb. 18, 2026, 9:19 a.m., Published: -
 Vulnerabilities: authentication bypass, authentication flaw
Affected productsExternal IDs
vendor: fortigate model: fortios

Windows Remote Desktop Services 0-Day Vulnerability Exploited in the Wild to Escalate Privileges

Trust: 4.25

Fetched: Feb. 18, 2026, 9:19 a.m., Published: Feb. 11, 2026, 2:37 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2026-21533

(Solved) - Identify the configuration vulnerability that exists due to the... (1 Answer) | Transtutors

Trust: 3.25

Fetched: Feb. 18, 2026, 9:18 a.m., Published: Feb. 15, 2026, 8:46 p.m.
 Vulnerabilities: configuration vulnerability
Affected productsExternal IDs

Cyber Threats Intensify Across Global Health Sector

Trust: 3.75

Fetched: Feb. 18, 2026, 9:18 a.m., Published: Feb. 17, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

What Do the New BSI macOS Security Warnings Mean for Your Device Safety? - PUPUWEB

Trust: 4.25

Fetched: Feb. 18, 2026, 9:17 a.m., Published: Feb. 18, 2026, 8:11 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2026-20612, CVE-2026-20620, CVE-2025-43530, CVE-2025-46290, CVE-2026-20625

2026 Vulnerability Report: 5 Critical Exploitation Trends

Trust: 4.0

Fetched: Feb. 18, 2026, 9:17 a.m., Published: Feb. 17, 2026, 11 a.m.
 Vulnerabilities: command injection, path traversal
Affected productsExternal IDs

CISA Warns of ZLAN ICS Devices Vulnerabilities Allows Complete Device

Related entries in the VARIoT vulnerabilities database: VAR-202401-1574, VAR-202402-1769

Trust: 5.75

Fetched: Feb. 18, 2026, 9:17 a.m., Published: Feb. 17, 2026, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo model: firewall
vendor: snort model: snort
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
db: NVD ids: CVE-2024-21916, CVE-2024-21915

IP Phone Cisco CP-6821-3PCC-K9 z podstawką i słuchawką (bez zasilacza) | Sprawdzony Sprzęt IT | Device

Trust: 3.0

Fetched: Feb. 18, 2026, 9:13 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ip phone

FileZen Vulnerability Enables Command Execution

Trust: 5.75

Fetched: Feb. 17, 2026, 9:34 a.m., Published: Feb. 16, 2026, 7:27 p.m.
 Vulnerabilities: command execution, os command injection, command injection
Affected productsExternal IDs
vendor: soliton model: filezen
db: NVD ids: CVE-2026-251088, CVE-2026-25108

Apple Patches Actively Exploited Zero-day CVE-2026-20700 In Dyld Across IOS, MacOS And Other Platforms

Trust: 4.25

Fetched: Feb. 17, 2026, 9:34 a.m., Published: Feb. 16, 2026, 9:36 a.m.
 Vulnerabilities: memory corruption, code execution, privilege escalation
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: watchos
vendor: apple model: iphone
vendor: apple model: tvos
vendor: apple model: safari
vendor: apple model: ipad
vendor: trend model: security
db: NVD ids: CVE-2025-14174, CVE-2026-20700, CVE-2025-43529

Shelly Security Vulnerability: Check This Setting Now

Trust: 3.0

Fetched: Feb. 17, 2026, 9:33 a.m., Published: Feb. 16, 2026, 3:45 p.m.
 Vulnerabilities: -
Affected productsExternal IDs

Joomla Vulnerabilities in Novarain/Tassos Framework Expose SQL Injection Risks

Trust: 4.0

Fetched: Feb. 17, 2026, 9:33 a.m., Published: Feb. 3, 2026, midnight
 Vulnerabilities: code execution, sql injection
Affected productsExternal IDs

expo-device 56.0.0-canary-20260212-4f61309 vulnerabilities | Snyk

Trust: 3.5

Fetched: Feb. 17, 2026, 9:33 a.m., Published: Feb. 2, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canary model: canary

CISA Warns of ZLAN ICS Devices Vulnerabilities Allows Complete Device Takeover - HEAL Security Inc. - Cyber Threat Intelligence for the Healthcare Sector

Trust: 4.0

Fetched: Feb. 17, 2026, 9:32 a.m., Published: Feb. 16, 2026, 10:07 a.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2026-247899, CVE-2026-250849

CVE-2020-36981 : Unquoted Service Path Vulnerability in Motorola Device Manager

Trust: 4.25

Fetched: Feb. 17, 2026, 9:31 a.m., Published: Jan. 27, 2026, 6:51 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: motorola model: motorola
db: NVD ids: CVE-2020-36981

CISA Warns of Microsoft Configuration Manager SQL Injection Vulnerability Exploited in Attacks

Trust: 4.75

Fetched: Feb. 17, 2026, 9:31 a.m., Published: Feb. 14, 2026, 3:27 a.m.
 Vulnerabilities: code execution, sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-43468

Check for Windows 11 updates. Microsoft patched a big vulnerability. | Mashable

Trust: 3.0

Fetched: Feb. 17, 2026, 9:29 a.m., Published: Feb. 12, 2026, 5:19 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Root Cause Analysis & PoC Exploit for CVE-2026-24061 | SafeBreach

Trust: 3.75

Fetched: Feb. 17, 2026, 9:28 a.m., Published: Jan. 28, 2026, 6:25 a.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
db: NVD ids: CVE-2026-24061

Access Blocked - SecNews.gr

Trust: 3.25

Fetched: Feb. 17, 2026, 9:27 a.m., Published: -
 Vulnerabilities: sql injection
Affected productsExternal IDs