Sign-up

VARIoT news about IoT security

Mobile Device CVEs and Security Vulnerabilities - OpenCVE

Trust: 4.5

Fetched: Feb. 20, 2026, 9:37 a.m., Published: Feb. 3, 2026, midnight
 Vulnerabilities: command injection, authorization vulnerability, os command injection...
Affected productsExternal IDs
vendor: dell model: unisphere
vendor: sonos model: sonos

8 VoIP Security Issues That Threaten Your Business - CloudTalk

Trust: 3.75

Fetched: Feb. 20, 2026, 9:35 a.m., Published: Aug. 26, 2022, 7 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: essential model: phone

Critical vm2 Sandbox Vulnerability in Node.js Lets Attackers Run Untrusted Code

Trust: 5.75

Fetched: Feb. 20, 2026, 9:34 a.m., Published: Jan. 27, 2026, 11:49 a.m.
 Vulnerabilities: command execution, code execution, arbitrary command execution
Affected productsExternal IDs
vendor: node.js model: node.js
db: NVD ids: CVE-2026-22709

Urgent iPhone Security Update: Why You Need to Install It Now - iDefend

Trust: 3.5

Fetched: Feb. 20, 2026, 9:32 a.m., Published: Feb. 17, 2026, 10:26 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: ipad

Critical Vulnerabilities Reported in PUSR USR-W610 Industrial IoT Devices

Trust: 4.25

Fetched: Feb. 20, 2026, 9:29 a.m., Published: Feb. 9, 2026, midnight
 Vulnerabilities: weak password
Affected productsExternal IDs
db: NVD ids: CVE-2026-25715, CVE-2026-26049, CVE-2026-26048, CVE-2026-24455

Cyber Threats Intensify Across Global Health Sector

Trust: 3.75

Fetched: Feb. 20, 2026, 9:28 a.m., Published: Feb. 17, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Surface Pro 10 February 2026 update is now live

Trust: 3.75

Fetched: Feb. 20, 2026, 9:28 a.m., Published: Feb. 17, 2026, midnight
 Vulnerabilities: information disclosure, authentication bypass, code execution...
Affected productsExternal IDs

Connected Device Cybersecurity: How to Meet New Consumer IoT Regulations

Trust: 3.75

Fetched: Feb. 20, 2026, 9:26 a.m., Published: Feb. 7, 2026, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

CVE-2025-47865: Local File Inclusion Vulnerability in Trend Micro Apex Central Widget - Ameeba Exploit Tracker

Trust: 5.5

Fetched: Feb. 20, 2026, 9:26 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: local file inclusion, file inclusion, code execution
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2025-47865

Understanding CVE-2025-67399: Vulnerability in AIRTH SMART HOME AQI MONITOR Bootloader

Trust: 4.0

Fetched: Feb. 20, 2026, 9:25 a.m., Published: Feb. 1, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-67399

iOS 26.3 update warning highlights urgent iPhone security risk

Trust: 5.75

Fetched: Feb. 20, 2026, 9:25 a.m., Published: Feb. 15, 2026, 4:22 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: software update
vendor: apple model: webkit
db: NVD ids: CVE-2026-20700, CVE-2025-14174, CVE-2025-43529

U.S. CISA adds Dell RecoverPoint and GitLab flaws to its Known Exploited Vulnerabilities catalog

Trust: 4.5

Fetched: Feb. 20, 2026, 9:24 a.m., Published: Feb. 19, 2026, 3:16 p.m.
 Vulnerabilities: request forgery, command execution, path traversal
Affected productsExternal IDs
vendor: google model: nexus
db: NVD ids: CVE-2021-22175, CVE-2026-22769, CVE-2020-7796

Why Should You Update to iOS 26.3 Immediately? - PUPUWEB

Trust: 4.75

Fetched: Feb. 20, 2026, 9:23 a.m., Published: Feb. 18, 2026, 7:58 a.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: google model: home
vendor: google model: android
vendor: apple model: ipad
vendor: apple model: macos
vendor: apple model: watchos
vendor: apple model: iphone
vendor: apple model: ipad air
vendor: apple model: tvos
db: NVD ids: CVE-2026-20700, CVE-2025-14174, CVE-2025-43529

CVE-2026-27199: Werkzeug Win Device Name DoS | Miggo

Trust: 3.25

Fetched: Feb. 20, 2026, 9:20 a.m., Published: Feb. 20, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-27199

Critical Flaw in Grandstream VoIP Phones Allows Remote Takeover - Delimiter Online

Trust: 5.5

Fetched: Feb. 20, 2026, 9:19 a.m., Published: Feb. 18, 2026, midnight
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: grandstream networks model: gxp1600
vendor: grandstream model: gxp1600
db: NVD ids: CVE-2026-2329

CVE-2026-26991: LibreNMS Device Groups Name Stored Cross-Site Scripting Vulnerability

Trust: 3.75

Fetched: Feb. 20, 2026, 9:19 a.m., Published: Feb. 18, 2026, midnight
 Vulnerabilities: session hijacking, cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2026-26991

CVE-2026-20119 | Tenable®

Trust: 6.0

Fetched: Feb. 20, 2026, 9:18 a.m., Published: Feb. 4, 2026, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: roomos
vendor: cisco model: telepresence collaboration endpoint
vendor: cisco model: telepresence
vendor: cisco model: meeting
vendor: cisco model: cisco telepresence
vendor: cisco model: cisco roomos
db: NVD ids: CVE-2026-20119

Manage your Google Settings - Google Account Help

Trust: 3.0

Fetched: Feb. 20, 2026, 9:09 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

European Parliament Blocks AI Features on Corporate Devices Over Cybersecurity Concerns

Trust: 3.0

Fetched: Feb. 18, 2026, 9:25 a.m., Published: Feb. 17, 2026, 12:29 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

WhisperPair: Millions of Bluetooth Devices at Risk | OnOff.gr

Trust: 3.5

Fetched: Feb. 18, 2026, 9:24 a.m., Published: Feb. 17, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
vendor: oneplus model: oneplus
db: NVD ids: CVE-2025-36911