Sign-up

VARIoT news about IoT security

Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability - Cisco

Trust: 4.25

Fetched: March 8, 2026, 9:30 a.m., Published: March 5, 2026, 1:14 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Look What You Made Us Patch: 2025 Zero-Days in Review | Google Cloud Blog

Trust: 5.25

Fetched: March 8, 2026, 9:29 a.m., Published: March 5, 2026, 11:03 p.m.
 Vulnerabilities: privilege escalation, code injection, memory corruption...
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
vendor: google model: nexus
vendor: google model: chrome
vendor: trend model: security
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: android
vendor: sonicwall model: secure mobile access
vendor: apple model: java
db: NVD ids: CVE-2025-5419, CVE-2025-61884, CVE-2021-37973, CVE-2025-14174, CVE-2025-8088, CVE-2025-40602, CVE-2023-2136, CVE-2023-6345, CVE-2023-33106, CVE-2024-0519, CVE-2025-27038, CVE-2025-21043, CVE-2025-23006, CVE-2025-21042, CVE-2025-43300, CVE-2025-48543, CVE-2025-6558, CVE-2025-61882, CVE-2025-21590, CVE-2025-0282, CVE-2025-2783, CVE-2025-38352

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities

Trust: 4.75

Fetched: March 8, 2026, 9:28 a.m., Published: March 4, 2026, 4:08 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: asa software
db: NVD ids: CVE-2026-20103, CVE-2026-20101, CVE-2026-20106, CVE-2026-20100, CVE-2026-20105

IoT Devices Vulnerability and Attack Vectors (2026 Field Notes from a Security-Focused Engineer) - TheLinuxCode

Trust: 4.5

Fetched: March 8, 2026, 9:27 a.m., Published: Feb. 19, 2026, 1:37 a.m.
 Vulnerabilities: default credentials, weak password, memory corruption...
Affected productsExternal IDs
vendor: node.js model: node.js

This high-severity Chrome Gemini vulnerability lets malicious extensions spy on your PC | ZDNET

Trust: 3.5

Fetched: March 6, 2026, 9:33 a.m., Published: March 3, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: google model: google chrome
vendor: google model: chrome
vendor: palo model: networks
db: NVD ids: CVE-2026-0628

How to Conduct a Security Vulnerability Assessment: A Step-by-Step Example

Trust: 3.75

Fetched: March 6, 2026, 9:32 a.m., Published: Feb. 27, 2026, 6:39 a.m.
 Vulnerabilities: cross-site scripting, sql injection
Affected productsExternal IDs
vendor: wireshark model: wireshark

CVE-2025-7375 - Unauthenticated Denial-of-Service Vulnerability in Omada EAP610

Trust: 3.0

Fetched: March 6, 2026, 9:32 a.m., Published: March 5, 2026, 7:16 p.m.
 Vulnerabilities: service crash
Affected productsExternal IDs
db: NVD ids: CVE-2025-7375

CVE-2026-28536 Huawei HarmonyOS Critical CVETodo

Trust: 5.75

Fetched: March 6, 2026, 9:30 a.m., Published: March 5, 2026, 7:16 a.m.
 Vulnerabilities: improper validation, authentication bypass
Affected productsExternal IDs
vendor: huawei model: huawei
db: NVD ids: CVE-2026-28536

Cisco Catalyst SD-WAN Flaws Expose Devices to Root Access, Threatening Network Security

Related entries in the VARIoT vulnerabilities database: VAR-202602-4478, VAR-202602-3961, VAR-202602-4354, VAR-202602-3835, VAR-202602-4602

Trust: 5.5

Fetched: March 6, 2026, 9:29 a.m., Published: March 5, 2026, 6:11 a.m.
 Vulnerabilities: privilege escalation, authentication bypass, information disclosure
Affected productsExternal IDs
vendor: cisco model: sd-wan vmanage
vendor: cisco model: sd-wan
vendor: cisco model: wan manager
vendor: cisco model: catalyst
db: NVD ids: CVE-2026-20126, CVE-2026-20122, CVE-2026-20133, CVE-2026-20129, CVE-2026-20128

CVE-2026-20100 | Tenable®

Trust: 6.25

Fetched: March 6, 2026, 9:29 a.m., Published: March 4, 2026, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
db: NVD ids: CVE-2026-20100

CVE-2026-26949 Dell Device Management Agent (DDMA) Medium CVETodo

Trust: 4.75

Fetched: March 6, 2026, 9:27 a.m., Published: March 4, 2026, 6:16 p.m.
 Vulnerabilities: privilege escalation, command execution, authorization issue...
Affected productsExternal IDs
db: NVD ids: CVE-2026-26949, CVE-2026-269491

CVE-2026-22760 Dell Device Management Agent (DDMA) Low CVETodo

Trust: 3.0

Fetched: March 6, 2026, 9:27 a.m., Published: March 4, 2026, 5:16 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-22760

Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability - Cisco

Trust: 4.0

Fetched: March 6, 2026, 9:26 a.m., Published: March 5, 2026, 1:14 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: cisco model: asa software

EZVIZ - Creating Easy Smart Homes

Trust: 3.0

Fetched: March 6, 2026, 9:26 a.m., Published: May 6, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-22626, CVE-2026-22624, CVE-2026-22625, CVE-2026-22623

CVE-2025-52364: Insecure Permissions Vulnerability in Tenda CP3 Pro Firmware - Ameeba Exploit Tracker

Trust: 3.0

Fetched: March 6, 2026, 9:24 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-52364

CVE-2026-20062 - Vulnerability Details - OpenCVE

Trust: 3.75

Fetched: March 6, 2026, 9:23 a.m., Published: March 4, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: adaptive_security_appliance_software
vendor: cisco model: adaptive security appliance
db: NVD ids: CVE-2026-20062

Zyxel Devices Affected by Post-Authentication Command Injection and Service Disruption - Advisories

Trust: 5.0

Fetched: March 6, 2026, 9:22 a.m., Published: March 1, 2026, 6:58 p.m.
 Vulnerabilities: command injection, pointer dereference vulnerability, service disruption
Affected productsExternal IDs
db: NVD ids: CVE-2025-13943, CVE-2025-11845, CVE-2026-1459, CVE-2026-11847, CVE-2025-11846, CVE-2025-13942

Surface Laptop 4 with AMD gets new (March 04, 2026) firmware updates

Trust: 3.75

Fetched: March 6, 2026, 9:21 a.m., Published: March 4, 2026, midnight
 Vulnerabilities: denial of service, code execution, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2024-44074, CVE-2023-31315, CVE-2021-26383, CVE-2024-36352

CVE-2026-20131 - "Cisco Secure Firewall Management Center Java Deserialization Root RCE"

Trust: 3.0

Fetched: March 6, 2026, 9:21 a.m., Published: March 4, 2026, 6:16 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-20131

CVE-2026-20079 - "Cisco Secure Firewall Management Center FMC Unauthorized Script Execution"

Trust: 5.0

Fetched: March 6, 2026, 9:21 a.m., Published: March 4, 2026, 6:16 p.m.
 Vulnerabilities: script execution
Affected productsExternal IDs
db: NVD ids: CVE-2026-20079