Sign-up

VARIoT news about IoT security

MediaTek Security Flaw Threatens Data on Millions of Android Devices - FilmoGaz

Trust: 3.75

Fetched: March 13, 2026, 9:30 a.m., Published: March 12, 2026, 8:03 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: android
vendor: samsung model: samsung
vendor: oneplus model: oneplus
db: NVD ids: CVE-2026-20435

CVE-2026-28472: CVE-2026-28472: Device Identity Verification Bypass in OpenClaw Gateway WebSocket Handshake | CVEReports

Trust: 3.25

Fetched: March 13, 2026, 9:30 a.m., Published: March 5, 2026, 9:59 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-28472

Vulnerability found: SSH Prefix Truncation Vulnerability (Terrapin)

Trust: 3.0

Fetched: March 11, 2026, 9:57 a.m., Published: Aug. 2, 2007, midnight
 Vulnerabilities: os command injection, code execution, command injection...
Affected productsExternal IDs
db: NVD ids: CVE-2025-26465, CVE-2025-61984, CVE-2023-51385, CVE-2023-38408, CVE-2023-51384, CVE-2023-48795

CVE-2025-58107: Microsoft Exchange EAS Vulnerability Exposes Sensitive Samsung Device Data - NS Toolkit

Trust: 3.75

Fetched: March 11, 2026, 9:56 a.m., Published: March 3, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: mobile devices
db: NVD ids: CVE-2025-58107

Cisco Secure Firewall Management Center Software Command Injection Vulnerability - Cisco

Trust: 5.25

Fetched: March 11, 2026, 9:50 a.m., Published: March 5, 2026, 1:14 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: asa software

Chrome Releases: 2026

Trust: 4.75

Fetched: March 11, 2026, 9:48 a.m., Published: March 11, 2026, midnight
 Vulnerabilities: buffer overflow, integer overflow
Affected productsExternal IDs
vendor: google model: chrome
db: NVD ids: CVE-2026-3537, CVE-2026-3540, CVE-2026-3536, CVE-2026-3545, CVE-2026-3541, CVE-2026-3543, CVE-2026-3544, CVE-2026-3542, CVE-2026-3538, CVE-2026-3539

Zyxel Patches Critical Vulnerability in Many Device Models - OODAloop

Trust: 4.25

Fetched: March 11, 2026, 9:46 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs

Advanced Cyber Security Incident Investigation for Smart Home Devices

Trust: 3.0

Fetched: March 11, 2026, 9:40 a.m., Published: March 11, 2026, 9:40 a.m.
 Vulnerabilities: -
Affected productsExternal IDs

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: March 11, 2026, 9:31 a.m., Published: -
 Vulnerabilities: configuration error
Affected productsExternal IDs

Microsoft Patch Tuesday, March 2026 Security Update Review - Qualys ThreatPROTECT

Trust: 5.0

Fetched: March 11, 2026, 9:24 a.m., Published: -
 Vulnerabilities: pointer dereference flaw, code execution, information disclosure...
Affected productsExternal IDs
db: NVD ids: CVE-2026-26132, CVE-2026-21262, CVE-2026-26144, CVE-2026-24294, CVE-2026-25187, CVE-2026-26113, CVE-2026-26127, CVE-2026-26110, CVE-2026-23651, CVE-2026-26122, CVE-2026-26124, CVE-2026-24291, CVE-2026-23668, CVE-2026-26125, CVE-2026-21536, CVE-2026-24289

Cisco Secure Firewall Threat Defense Software Snort 3 SSL Memory Management Denial of Service Vulnerability

Trust: 4.5

Fetched: March 10, 2026, 9:28 a.m., Published: March 4, 2026, 4:10 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: snort model: snort
vendor: cisco model: device manager
vendor: cisco model: umbrella
vendor: cisco model: firepower threat defense
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower

Windows Notepad RCE Flaw Exploits Markdown Files | eSecurity Planet

Trust: 4.75

Fetched: March 10, 2026, 9:25 a.m., Published: Feb. 11, 2026, 3:32 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2026-20841

CVE-2025-1713: Interrupt Remapping Deadlock Vulnerability in Legacy PCI(-X) Devices - Ameeba Exploit Tracker

Trust: 3.25

Fetched: March 10, 2026, 9:23 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-1713

CVE-2026-3701 : Buffer Overflow Vulnerability in H3C Magic B1 Router

Trust: 3.5

Fetched: March 10, 2026, 9:23 a.m., Published: March 8, 2026, 4:02 a.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2026-3701

Hikvision Camera Vulnerability Actively Exploited, CISA Warns Agencies to Patch Immediately

Related entries in the VARIoT vulnerabilities database: VAR-201705-3762

Trust: 6.25

Fetched: March 10, 2026, 9:22 a.m., Published: March 9, 2026, 1:51 p.m.
 Vulnerabilities: authentication bypass, default credentials
Affected productsExternal IDs
vendor: hikvision model: ip cameras
vendor: hikvision model: hikvision
db: NVD ids: CVE-2017-7921

CVE-2026-3807 : Stack-Based Buffer Overflow in Tenda FH1202 Device

Related entries in the VARIoT vulnerabilities database: VAR-202603-1176

Trust: 5.5

Fetched: March 10, 2026, 9:21 a.m., Published: March 9, 2026, 6:32 a.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: tenda model: fh1202
db: NVD ids: CVE-2026-3807

Dell Device Management Agent, Improper Check for Unusual or Exceptional Conditions, CVE-2026-22760 (Low) - DailyCVE

Trust: 3.75

Fetched: March 10, 2026, 9:15 a.m., Published: March 9, 2026, 9:13 p.m.
 Vulnerabilities: agent crash, denial of service, service crash
Affected productsExternal IDs
db: NVD ids: CVE-2026-22760

Hikvision flaw exposes devices to privilege attacks - Arabian Post

Trust: 3.5

Fetched: March 10, 2026, 9:15 a.m., Published: March 9, 2026, 7:20 a.m.
 Vulnerabilities: privilege escalation, default credentials
Affected productsExternal IDs
vendor: hangzhou hikvision digital technology model: hikvision
vendor: hikvision model: hikvision

Cisco Secure Firewall Adaptive Security Appliance Software TCP Flood Denial of Service Vulnerability

Trust: 5.0

Fetched: March 10, 2026, 9:15 a.m., Published: March 4, 2026, 4:08 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: adaptive security appliance software

ClamAV Cascading Style Sheets Image Parsing Error Handling Denial of Service Vulnerability

Trust: 3.75

Fetched: March 10, 2026, 9:14 a.m., Published: March 4, 2026, 4:09 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: clamav
vendor: clamav model: clamav