Sign-up

VARIoT news about IoT security

Mongoose: Preauth RCE and mTLS Bypass on Millions of Devices | evilsocket

Trust: 6.25

Fetched: April 8, 2026, 9:34 a.m., Published: April 2, 2026, midnight
 Vulnerabilities: buffer overflow, authentication bypass, code execution
Affected productsExternal IDs
vendor: broadcom model: linux
vendor: cesanta model: mongoose
vendor: cesanta model: mongoose server
vendor: samsung model: printers
vendor: samsung model: samsung
vendor: bosch model: ip cameras
vendor: google model: home
db: NVD ids: CVE-2026-5246, CVE-2026-5245, CVE-2026-5244

Android Security Flaw Allows Hackers to Unlock Phones in Under a Minute

Trust: 3.5

Fetched: April 8, 2026, 9:33 a.m., Published: April 6, 2026, 12:31 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: essential model: phone
vendor: samsung model: notes
vendor: samsung model: android
vendor: samsung model: samsung
vendor: google model: android
db: NVD ids: CVE-2026-20435

CVE-2025-55611: Buffer Overflow in D-Link DIR-619L 2.06B01 formLanguageChange Function - Ameeba Security Research

Related entries in the VARIoT vulnerabilities database: VAR-202508-2311

Trust: 6.0

Fetched: April 8, 2026, 9:32 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: d-link model: dir-619l
db: NVD ids: CVE-2025-55611

Apple Issues Urgent Security Update to Counter 'Darksword' iPhone Hack - British Brief

Trust: 3.25

Fetched: April 8, 2026, 9:30 a.m., Published: April 2, 2026, 3:05 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Medical Device Breach Statistics 2026 Report - ORDR

Trust: 4.0

Fetched: April 8, 2026, 9:21 a.m., Published: April 3, 2026, 8:21 p.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs

Android flaw on MediaTek phones may bypass your PIN in under a minute | Fox News

Trust: 3.5

Fetched: April 8, 2026, 9:17 a.m., Published: May 8, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: notes
vendor: samsung model: android
vendor: samsung model: samsung
vendor: samsung model: android phone
vendor: samsung model: mobile
vendor: google model: android
db: NVD ids: CVE-2026-20435

Android Security Bulletin-April 2026 | Android Open Source Project

Trust: 4.25

Fetched: April 8, 2026, 9:16 a.m., Published: April 8, 2026, midnight
 Vulnerabilities: code execution, denial of service, information disclosure
Affected productsExternal IDs
vendor: samsung model: notes
vendor: samsung model: android
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: google model: android
vendor: google model: pixel
vendor: motorola model: android
vendor: motorola model: motorola
vendor: huawei model: huawei
db: NVD ids: CVE-2025-48651, CVE-2026-0049

This Android vulnerability can break your lock screen in under 60 seconds | Malwarebytes

Trust: 3.0

Fetched: April 8, 2026, 9:10 a.m., Published: March 12, 2026, 1:13 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-20435

Gray Hats on X: "SICK PSIRT warns of critical vulnerabilities (CVE-2026-2330, CVE-2026-2331) in Lector85x and Lector83x scanners allowing full device takeover. Update now #SICKLector #CVE20262331 #ICSSecurity #CyberSecurity #IndustrialAutomation #Vulnerability #PatchAlert https://t.co/AcoU8ZAMxD https://t.co/WdJPqdaQYs" / X

Trust: 3.25

Fetched: March 18, 2026, 10:26 a.m., Published: March 18, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-2330, CVE-2026-2331

Mar 2026: Windows Connected Devices Platform Service Elevation of Privilege Vulnerability: CVE-2026-24292 March 2026

Trust: 3.25

Fetched: March 18, 2026, 10:20 a.m., Published: March 18, 2026, midnight
 Vulnerabilities: use after free
Affected productsExternal IDs
db: NVD ids: CVE-2026-24292

AppArmor vulnerability fixes available | Ubuntu

Trust: 4.75

Fetched: March 18, 2026, 10:18 a.m., Published: March 12, 2026, midnight
 Vulnerabilities: privilege escalation, denial of service, information leak
Affected productsExternal IDs
vendor: canonical model: ubuntu

GitHub - automate-it0/qualcomm-vulnerability-scanner: A tool to scan Android devices for the recently exploited Qualcomm flaw CVE-2026-21385, providing a simple and efficient way to identify vulnerable devices and apply necessary patches. · GitHub

Trust: 3.0

Fetched: March 18, 2026, 10:18 a.m., Published: March 1, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-21385

Fixing Log4j 2.25 Vulnerabilities: A 2025 Retrospective Guide | Markaicode

Trust: 3.75

Fetched: March 18, 2026, 10:17 a.m., Published: March 18, 2025, midnight
 Vulnerabilities: code execution, denial of service, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-21385, CVE-2025-21384, CVE-2025-21386

CVE-2026-4187 Tiandy Easy7 Integrated Management Platform Device Identifier UpdateLocalDevInfo.jsp missing authentication

Trust: 3.5

Fetched: March 18, 2026, 10:17 a.m., Published: July 17, 2000, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-4187

Hackers Exploit Critical BeyondTrust Vulnerability to Deploy VShell and SparkRAT

Trust: 4.5

Fetched: March 18, 2026, 10:16 a.m., Published: Feb. 20, 2026, 6:56 a.m.
 Vulnerabilities: service disruption, command execution, parameter injection...
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo alto networks model: networks
db: NVD ids: CVE-2024-12356, CVE-2026-1731

If You Have One of These Older Apple Devices, Update It ASAP | Lifehacker

Trust: 5.75

Fetched: March 18, 2026, 10:09 a.m., Published: March 12, 2026, 10:30 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: ipad
vendor: apple model: webkit
vendor: apple model: ipod touch
vendor: apple model: iphone
db: NVD ids: CVE-2023-43000, CVE-2023-41974, CVE-2024-23222, CVE-2023-43010

Microsoft Releases Emergency Windows 11 Hotpatch to Fix Remote Code Execution Flaw - gHacks Tech News

Trust: 4.25

Fetched: March 18, 2026, 10:04 a.m., Published: March 15, 2026, 9:39 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2026-25172, CVE-2026-25173, CVE-2026-26111

CVE-2026-4197 - D-Link Multiple NAS Devices Command…

Related entries in the VARIoT vulnerabilities database: VAR-202603-1781

Trust: 4.25

Fetched: March 18, 2026, 9:55 a.m., Published: March 6, 2026, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2026-4197

Is Your Android Device Secure? New Vulnerability Allows Hac

Trust: 3.25

Fetched: March 18, 2026, 9:42 a.m., Published: March 18, 2013, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

CVE-2026-22317 Phoenix Contact FL SWITCH 2005, FL SWITCH 2... CVETodo

Trust: 5.75

Fetched: March 18, 2026, 9:41 a.m., Published: March 18, 2005, midnight
 Vulnerabilities: denial of service, privilege escalation, command execution...
Affected productsExternal IDs
vendor: phoenix model: contact fl switch
db: NVD ids: CVE-2026-22317