Sign-up

VARIoT news about IoT security

Ring Doorbell Security Issues: What Are Privacy Concerns & Can It Be Hacked?

Trust: 3.5

Fetched: Feb. 11, 2026, 9:47 a.m., Published: Feb. 1, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: lenovo model: updates
vendor: google model: home
vendor: google model: android

WordPress Security Bulletin: PopupKit Plugin Vulnerability (CVE-2025-14895) | Freshy

Trust: 4.0

Fetched: Feb. 11, 2026, 9:46 a.m., Published: Feb. 10, 2026, 4:46 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-14895

Windows Remote Assistance Vulnerability Allow Attacker to Bypass Security Features

Trust: 3.75

Fetched: Feb. 11, 2026, 9:45 a.m., Published: Jan. 15, 2026, 2:06 p.m.
 Vulnerabilities: security feature bypass, feature bypass
Affected productsExternal IDs
db: NVD ids: CVE-2026-20824

Hackers could exploit these W-Fi security flaws to knock your internet offline | TechRadar

Trust: 4.75

Fetched: Feb. 11, 2026, 9:40 a.m., Published: Jan. 19, 2026, 4:40 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: asus model: asus
vendor: asus model: router
vendor: asus model: routers

GitHub - SpectrixDev/DIY_WhisperPair: Hijacking Bluetooth Accessories Using Google Fast Pair: WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit

Trust: 3.5

Fetched: Feb. 11, 2026, 9:40 a.m., Published: Feb. 9, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-36911

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: Feb. 11, 2026, 9:39 a.m., Published: -
 Vulnerabilities: configuration error
Affected productsExternal IDs

CVE-2026-0651 - Path Traversal on TP-Link Tapo D235 and C260 via Local https

Trust: 5.0

Fetched: Feb. 11, 2026, 9:39 a.m., Published: Feb. 10, 2026, 6:16 p.m.
 Vulnerabilities: code execution, path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2026-0651

CVE-2025-11004 - Reflected XSS vulnerability in Simplicity Device Manager tool

Trust: 3.25

Fetched: Feb. 11, 2026, 9:37 a.m., Published: Feb. 10, 2026, 4:16 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-11004

Reset your Android device to factory settings - Android Help

Trust: 3.0

Fetched: Feb. 11, 2026, 9:20 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

European Commission Mobile Cyberattack Meets Swift Response

Trust: 3.75

Fetched: Feb. 10, 2026, 9:37 a.m., Published: Feb. 9, 2026, 7:19 p.m.
 Vulnerabilities: code injection
Affected productsExternal IDs
db: NVD ids: CVE-2026-1281, CVE-2026-1340

European Commission MDM Hack Exposes Staff Data

Trust: 3.5

Fetched: Feb. 10, 2026, 9:37 a.m., Published: Feb. 10, 2026, 5:34 a.m.
 Vulnerabilities: privilege escalation, authentication bypass
Affected productsExternal IDs
vendor: barracuda model: barracuda
vendor: check point model: check point
vendor: barracuda networks model: barracuda

European Commission hit by cyberattackers targeting mobile management platform - Help Net Security

Trust: 4.0

Fetched: Feb. 10, 2026, 9:36 a.m., Published: Feb. 9, 2026, 2:02 p.m.
 Vulnerabilities: code injection
Affected productsExternal IDs
db: NVD ids: CVE-2026-1281, CVE-2026-1340

Indian Govt Flags High-Risk Microsoft Edge Flaw, Urges Millions of Users to Update Immediately

Trust: 4.75

Fetched: Feb. 10, 2026, 9:36 a.m., Published: Feb. 5, 2026, 4:17 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome

CVE-2025-41649: Critical Buffer Overflow Vulnerability Leading to Denial-of-Service (DoS) - Ameeba Exploit Tracker

Trust: 5.0

Fetched: Feb. 10, 2026, 9:34 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: buffer overflow, system crash
Affected productsExternal IDs
db: NVD ids: CVE-2025-41649

Path Traversal Vulnerability in tfjs-converter write_weights.py Allows Arbitrary File Write · Issue #8628 · tensorflow/tfjs

Trust: 3.75

Fetched: Feb. 10, 2026, 9:34 a.m., Published: Feb. 19, 2026, midnight
 Vulnerabilities: code execution, path traversal, directory traversal
Affected productsExternal IDs

CVE-2025-52694 (CVSS 10): Critical Advantech SQL Injection Exposes IoT Devices

Trust: 5.25

Fetched: Feb. 10, 2026, 9:32 a.m., Published: Jan. 13, 2026, 12:12 a.m.
 Vulnerabilities: sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-52694

Security Advisory on Logic Vulnerability on Archer C20 and AX53 (CVE-2026-0834) | TP-Link

Trust: 3.25

Fetched: Feb. 10, 2026, 9:32 a.m., Published: Feb. 7, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-0834

Security Advisory on Authenticated Command Injection Vulnerabilities on Archer BE230 (CVE-2026-0630, CVE-2026-0631, CVE-2026-22221-22227, CVE-2026-22229) | TP-Link

Trust: 5.0

Fetched: Feb. 10, 2026, 9:32 a.m., Published: Feb. 7, 2026, midnight
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2026-22223, CVE-2026-0631, CVE-2026-22226, CVE-2026-22229, CVE-2026-22225, CVE-2026-0630, CVE-2026-22222, CVE-2026-22221, CVE-2026-22224, CVE-2026-22227

Microsoft Patch Tuesday January 2026 - 114 Vulnerabilities Fixed Including 3 Zero-days

Trust: 4.5

Fetched: Feb. 10, 2026, 9:31 a.m., Published: Jan. 13, 2026, 6:10 p.m.
 Vulnerabilities: denial of service, feature bypass, code execution...
Affected productsExternal IDs
vendor: motorola model: motorola
db: NVD ids: CVE-2026-20835, CVE-2026-20838, CVE-2026-20816, CVE-2026-20965, CVE-2026-20952, CVE-2026-20929, CVE-2026-20870, CVE-2026-20829, CVE-2026-20962, CVE-2026-20852, CVE-2026-20876, CVE-2026-20849, CVE-2026-20830, CVE-2026-20939, CVE-2026-20804, CVE-2026-20937, CVE-2026-21265, CVE-2026-20856, CVE-2026-20931, CVE-2026-20946, CVE-2026-20820, CVE-2026-20822, CVE-2026-20814, CVE-2026-20940, CVE-2026-0386, CVE-2026-20924, CVE-2026-20869, CVE-2026-20927, CVE-2026-20809, CVE-2026-20862, CVE-2026-20832, CVE-2026-20919, CVE-2026-20854, CVE-2026-20926, CVE-2026-20944, CVE-2026-20815, CVE-2026-20831, CVE-2026-20844, CVE-2026-20938, CVE-2026-20947, CVE-2026-20936, CVE-2026-20851, CVE-2026-20948, CVE-2026-20825, CVE-2026-20803, CVE-2026-20963, CVE-2023-31096, CVE-2026-20935, CVE-2026-20943, CVE-2026-20840, CVE-2026-20853, CVE-2026-20839, CVE-2026-20818, CVE-2024-55414, CVE-2026-20866, CVE-2026-20824, CVE-2026-20842, CVE-2026-20805, CVE-2026-20857, CVE-2026-20811, CVE-2026-20848, CVE-2026-20921, CVE-2026-20923, CVE-2026-20872, CVE-2026-21221, CVE-2026-20957, CVE-2026-20868, CVE-2026-20955, CVE-2026-20871, CVE-2026-20877, CVE-2026-20873, CVE-2026-20828, CVE-2026-20817, CVE-2026-20808, CVE-2026-20874, CVE-2026-20920, CVE-2026-20875, CVE-2026-20847, CVE-2026-20826, CVE-2026-20843, CVE-2026-20863, CVE-2026-20959, CVE-2026-20865, CVE-2026-20836, CVE-2026-20934, CVE-2026-21219, CVE-2026-20823, CVE-2026-20949, CVE-2026-20819, CVE-2026-20837, CVE-2026-20860, CVE-2026-20918, CVE-2026-20858, CVE-2026-20922, CVE-2026-20950, CVE-2026-21224, CVE-2026-20953, CVE-2026-20925, CVE-2026-20867, CVE-2026-20956, CVE-2026-20821, CVE-2026-20951, CVE-2026-20810, CVE-2026-21226, CVE-2026-20833, CVE-2026-20812, CVE-2026-20859, CVE-2026-20827, CVE-2026-20861, CVE-2026-20834, CVE-2026-20932, CVE-2026-20864, CVE-2026-20941, CVE-2026-20958

‘Dodgy boxes’ and smart home devices can open door of your home to cybercriminals - Grant Thornton - The Irish Times

Trust: 4.0

Fetched: Feb. 10, 2026, 9:30 a.m., Published: Feb. 9, 2026, 11:04 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs