Sign-up

VARIoT news about IoT security

Reports About Cyberattacks Against Cisco Secure Email Gateway And Cisco Secure Email and Web Manager

Trust: 3.75

Fetched: Jan. 13, 2026, 9:48 a.m., Published: Jan. 12, 2026, 8:12 p.m.
 Vulnerabilities: default administrator password
Affected productsExternal IDs
vendor: cisco model: cisco asyncos
vendor: cisco model: asyncos
vendor: cisco model: asyncos software

Critical 0-Day RCE Vulnerability in Networking Devices Exposes 70,000+ Hosts

Trust: 5.75

Fetched: Jan. 13, 2026, 9:48 a.m., Published: Dec. 30, 2025, 9:48 a.m.
 Vulnerabilities: command execution, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-54322

CVE-2026-0854 Merit LILIN DH032, DVR708, DVR716 High CVETodo

Trust: 4.75

Fetched: Jan. 13, 2026, 9:47 a.m., Published: Jan. 12, 2026, 6:16 a.m.
 Vulnerabilities: command injection, command execution, code execution...
Affected productsExternal IDs
db: NVD ids: CVE-2026-0854

CVE-2026-22212 - TinyOS <= 2.1.2 Stack-Based Buffer Overflow in mcp2200gpio - SecAlerts

Trust: 3.25

Fetched: Jan. 13, 2026, 9:45 a.m., Published: -
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2026-22212

TOTOLINK: Unpatched Vulnerability in TOTOLINK EX200 Puts Devices at Risk

Trust: 3.75

Fetched: Jan. 13, 2026, 9:45 a.m., Published: Jan. 7, 2026, 11:35 a.m.
 Vulnerabilities: arbitrary command execution, command execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-65606

CVE-2026-22212 - TinyOS <= 2.1.2 Stack-Based Buffer Overflow in mcp2200gpio

Trust: 5.0

Fetched: Jan. 13, 2026, 9:45 a.m., Published: Jan. 12, 2026, 11:15 p.m.
 Vulnerabilities: stack memory corruption, buffer overflow, memory corruption
Affected productsExternal IDs
db: NVD ids: CVE-2026-22212

Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability

Trust: 5.0

Fetched: Jan. 13, 2026, 9:45 a.m., Published: Jan. 7, 2026, 3:54 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine
vendor: cisco model: identity services engine

React2Shell Vulnerability Exploited to Build Massive IoT Botnet - Hackers Arise

Related entries in the VARIoT vulnerabilities database: VAR-202303-1268

Trust: 4.5

Fetched: Jan. 13, 2026, 9:44 a.m., Published: Jan. 8, 2026, 1:56 p.m.
 Vulnerabilities: sql injection, code execution
Affected productsExternal IDs
vendor: hikvision model: hikvision
db: NVD ids: CVE-2025-55182, CVE-2023-1389, CVE-2025-24893, CVE-2025-66478

CVE-2023-44112: Device Authentication Module Out-of-Bounds Access Vulnerability - Ameeba Exploit Tracker

Trust: 4.75

Fetched: Jan. 13, 2026, 9:42 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: bounds access flaw, bounds access vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2023-44112

CVE-2026-0855 - Merit LILIN｜IP Camera - OS Command Injection

Trust: 6.0

Fetched: Jan. 13, 2026, 9:41 a.m., Published: Jan. 12, 2026, 7:16 a.m.
 Vulnerabilities: command injection, os command injection
Affected productsExternal IDs
db: NVD ids: CVE-2026-0855

What Is Industrial Internet of Things (IIoT) Security? - Palo Alto Networks

Trust: 4.25

Fetched: Jan. 13, 2026, 9:40 a.m., Published: Jan. 6, 2026, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo model: networks

Cisco identifies vulnerability in ISE network access control devices

Trust: 4.75

Fetched: Jan. 13, 2026, 9:39 a.m., Published: Jan. 8, 2026, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: cisco model: identity services engine
vendor: cisco model: network access control
vendor: cisco systems model: identity services engine
vendor: cisco systems model: network access control
db: NVD ids: CVE-2026-20029

CVE-2025-3646 - Petlibro Smart Pet Feeder Platform through 1.7.31 Authorization Bypass via Device Share API

Trust: 4.0

Fetched: Jan. 13, 2026, 9:38 a.m., Published: Jan. 4, 2026, 12:15 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-3646

RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers

Related entries in the VARIoT vulnerabilities database: VAR-202303-1268

Trust: 3.75

Fetched: Jan. 13, 2026, 9:34 a.m., Published: Jan. 1, 2026, 9:19 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-55182, CVE-2023-1389, CVE-2025-24893

CVE-2026-0853 A-Plus Video Technologies AP-RM864P, AP-RM86... CVETodo

Trust: 3.75

Fetched: Jan. 13, 2026, 9:34 a.m., Published: Jan. 12, 2026, 4:15 a.m.
 Vulnerabilities: default credentials, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2026-08531, CVE-2026-0853

CVE-2025-68657 - espressif/usb_host_hid Double-Free Race Condition in USB Host HID Device Close Path - SecAlerts

Trust: 3.0

Fetched: Jan. 13, 2026, 9:33 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-68657

Patchday: Dolby Digital security vulnerability in Android closed | heise online

Trust: 3.5

Fetched: Jan. 13, 2026, 9:31 a.m., Published: Jan. 6, 2026, 12:20 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: google model: android
db: NVD ids: CVE-2025-54957

TOTOLINK EX200 Vulnerability Allows Full Device Takeover via Unauthenticated Telnet

Trust: 3.0

Fetched: Jan. 13, 2026, 9:31 a.m., Published: Jan. 7, 2026, 1:55 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-65606

CVE vulnerability via command injection in D-Link

Trust: 3.25

Fetched: Jan. 13, 2026, 9:30 a.m., Published: Jan. 10, 2026, 9:30 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs

CVE-2025-66176 - Hikvision Access Control Stack Overflow Vulnerability

Trust: 4.0

Fetched: Jan. 13, 2026, 9:29 a.m., Published: Jan. 13, 2026, 3:16 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hikvision model: hikvision
db: NVD ids: CVE-2025-66176