Sign-up

VARIoT news about IoT security

European Commission MDM Hack Exposes Staff Data

Trust: 3.5

Fetched: Feb. 10, 2026, 9:37 a.m., Published: Feb. 10, 2026, 5:34 a.m.
 Vulnerabilities: privilege escalation, authentication bypass
Affected productsExternal IDs
vendor: barracuda model: barracuda
vendor: check point model: check point
vendor: barracuda networks model: barracuda

European Commission hit by cyberattackers targeting mobile management platform - Help Net Security

Trust: 4.0

Fetched: Feb. 10, 2026, 9:36 a.m., Published: Feb. 9, 2026, 2:02 p.m.
 Vulnerabilities: code injection
Affected productsExternal IDs
db: NVD ids: CVE-2026-1281, CVE-2026-1340

Indian Govt Flags High-Risk Microsoft Edge Flaw, Urges Millions of Users to Update Immediately

Trust: 4.75

Fetched: Feb. 10, 2026, 9:36 a.m., Published: Feb. 5, 2026, 4:17 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome

CVE-2025-41649: Critical Buffer Overflow Vulnerability Leading to Denial-of-Service (DoS) - Ameeba Exploit Tracker

Trust: 5.0

Fetched: Feb. 10, 2026, 9:34 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: buffer overflow, system crash
Affected productsExternal IDs
db: NVD ids: CVE-2025-41649

Path Traversal Vulnerability in tfjs-converter write_weights.py Allows Arbitrary File Write · Issue #8628 · tensorflow/tfjs

Trust: 3.75

Fetched: Feb. 10, 2026, 9:34 a.m., Published: Feb. 19, 2026, midnight
 Vulnerabilities: code execution, path traversal, directory traversal
Affected productsExternal IDs

CVE-2025-52694 (CVSS 10): Critical Advantech SQL Injection Exposes IoT Devices

Trust: 5.25

Fetched: Feb. 10, 2026, 9:32 a.m., Published: Jan. 13, 2026, 12:12 a.m.
 Vulnerabilities: sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-52694

Security Advisory on Logic Vulnerability on Archer C20 and AX53 (CVE-2026-0834) | TP-Link

Trust: 3.25

Fetched: Feb. 10, 2026, 9:32 a.m., Published: Feb. 7, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2026-0834

Security Advisory on Authenticated Command Injection Vulnerabilities on Archer BE230 (CVE-2026-0630, CVE-2026-0631, CVE-2026-22221-22227, CVE-2026-22229) | TP-Link

Trust: 5.0

Fetched: Feb. 10, 2026, 9:32 a.m., Published: Feb. 7, 2026, midnight
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2026-22223, CVE-2026-0631, CVE-2026-22226, CVE-2026-22229, CVE-2026-22225, CVE-2026-0630, CVE-2026-22222, CVE-2026-22221, CVE-2026-22224, CVE-2026-22227

Microsoft Patch Tuesday January 2026 - 114 Vulnerabilities Fixed Including 3 Zero-days

Trust: 4.5

Fetched: Feb. 10, 2026, 9:31 a.m., Published: Jan. 13, 2026, 6:10 p.m.
 Vulnerabilities: denial of service, feature bypass, code execution...
Affected productsExternal IDs
vendor: motorola model: motorola
db: NVD ids: CVE-2026-20835, CVE-2026-20838, CVE-2026-20816, CVE-2026-20965, CVE-2026-20952, CVE-2026-20929, CVE-2026-20870, CVE-2026-20829, CVE-2026-20962, CVE-2026-20852, CVE-2026-20876, CVE-2026-20849, CVE-2026-20830, CVE-2026-20939, CVE-2026-20804, CVE-2026-20937, CVE-2026-21265, CVE-2026-20856, CVE-2026-20931, CVE-2026-20946, CVE-2026-20820, CVE-2026-20822, CVE-2026-20814, CVE-2026-20940, CVE-2026-0386, CVE-2026-20924, CVE-2026-20869, CVE-2026-20927, CVE-2026-20809, CVE-2026-20862, CVE-2026-20832, CVE-2026-20919, CVE-2026-20854, CVE-2026-20926, CVE-2026-20944, CVE-2026-20815, CVE-2026-20831, CVE-2026-20844, CVE-2026-20938, CVE-2026-20947, CVE-2026-20936, CVE-2026-20851, CVE-2026-20948, CVE-2026-20825, CVE-2026-20803, CVE-2026-20963, CVE-2023-31096, CVE-2026-20935, CVE-2026-20943, CVE-2026-20840, CVE-2026-20853, CVE-2026-20839, CVE-2026-20818, CVE-2024-55414, CVE-2026-20866, CVE-2026-20824, CVE-2026-20842, CVE-2026-20805, CVE-2026-20857, CVE-2026-20811, CVE-2026-20848, CVE-2026-20921, CVE-2026-20923, CVE-2026-20872, CVE-2026-21221, CVE-2026-20957, CVE-2026-20868, CVE-2026-20955, CVE-2026-20871, CVE-2026-20877, CVE-2026-20873, CVE-2026-20828, CVE-2026-20817, CVE-2026-20808, CVE-2026-20874, CVE-2026-20920, CVE-2026-20875, CVE-2026-20847, CVE-2026-20826, CVE-2026-20843, CVE-2026-20863, CVE-2026-20959, CVE-2026-20865, CVE-2026-20836, CVE-2026-20934, CVE-2026-21219, CVE-2026-20823, CVE-2026-20949, CVE-2026-20819, CVE-2026-20837, CVE-2026-20860, CVE-2026-20918, CVE-2026-20858, CVE-2026-20922, CVE-2026-20950, CVE-2026-21224, CVE-2026-20953, CVE-2026-20925, CVE-2026-20867, CVE-2026-20956, CVE-2026-20821, CVE-2026-20951, CVE-2026-20810, CVE-2026-21226, CVE-2026-20833, CVE-2026-20812, CVE-2026-20859, CVE-2026-20827, CVE-2026-20861, CVE-2026-20834, CVE-2026-20932, CVE-2026-20864, CVE-2026-20941, CVE-2026-20958

‘Dodgy boxes’ and smart home devices can open door of your home to cybercriminals - Grant Thornton - The Irish Times

Trust: 4.0

Fetched: Feb. 10, 2026, 9:30 a.m., Published: Feb. 9, 2026, 11:04 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

Siemens Industrial Edge Device Kit | CISA

Trust: 3.0

Fetched: Feb. 10, 2026, 9:30 a.m., Published: Feb. 1, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-40805

⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More

Trust: 5.25

Fetched: Feb. 10, 2026, 9:29 a.m., Published: Jan. 26, 2026, 11:55 a.m.
 Vulnerabilities: authentication bypass, command injection, code execution
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend micro model: password manager
vendor: cisco model: webex
vendor: cisco model: unified communications
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
vendor: axis model: communications
vendor: axis model: axis
vendor: check point model: check point
vendor: vivotek model: camera
vendor: trend model: security
vendor: trend model: password manager
vendor: apple model: icloud
vendor: palo model: firewall
vendor: palo model: networks
vendor: google model: chrome
vendor: google model: google chrome
vendor: google model: home
vendor: aveva model: edge
db: NVD ids: CVE-2025-12383, CVE-2026-0723, CVE-2025-59718, CVE-2025-65118, CVE-2025-13928, CVE-2026-1220, CVE-2025-59719, CVE-2025-68145, CVE-2026-0629, CVE-2026-23744, CVE-2026-0685, CVE-2025-54874, CVE-2025-49758, CVE-2025-66516, CVE-2026-22219, CVE-2025-68144, CVE-2025-49796, CVE-2025-4949, CVE-2025-13878, CVE-2025-14533, CVE-2026-24061, CVE-2026-20045, CVE-2025-61937, CVE-2026-22794, CVE-2025-68675, CVE-2026-0920, CVE-2025-65586, CVE-2026-22200, CVE-2026-0828, CVE-2025-13151, CVE-2025-47179, CVE-2026-22755, CVE-2026-23760, CVE-2025-67968, CVE-2026-22218, CVE-2025-68143, CVE-2025-14369, CVE-2026-22844, CVE-2025-33206, CVE-2026-23594, CVE-2025-13927, CVE-2025-64691, CVE-2026-21962, CVE-2025-54988, CVE-2026-1245, CVE-2025-61943, CVE-2025-23048, CVE-2025-60021, CVE-2026-0622

APT Hackers Target Edge Devices by Abusing Trusted Services to Deploy

Trust: 3.75

Fetched: Feb. 10, 2026, 9:22 a.m., Published: Feb. 9, 2026, 4:31 p.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs
db: NVD ids: CVE-2023-46805, CVE-2024-21887, CVE-2023-27997

IoT Devices Vulnerability Analysis and Botnet Development by Dr Madhavi Thaker on Prezi

Trust: 4.5

Fetched: Feb. 10, 2026, 9:21 a.m., Published: Feb. 9, 2026, midnight
 Vulnerabilities: command injection, buffer overflow
Affected productsExternal IDs
vendor: tp-link model: tl-wr940n
vendor: tp-link model: wr940n
vendor: tenda model: ac1200
vendor: tenda model: router
vendor: linksys model: e5600
db: NVD ids: CVE-2025-29223

CVE-2024-49196: Denial of Service Vulnerability in Samsung Mobile Processor Exynos 1480 and 2400 - Ameeba Exploit Tracker

Trust: 5.75

Fetched: Feb. 10, 2026, 9:20 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: samsung mobile
vendor: samsung model: exynos
vendor: samsung model: mobile
db: NVD ids: CVE-2024-49196

WhisperPair: What the New Bluetooth Fast Pair Vulnerability Means for Your Devices

Trust: 3.75

Fetched: Feb. 10, 2026, 9:17 a.m., Published: Feb. 3, 2026, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: xiaomi model: redmi
vendor: oneplus model: 3
vendor: oneplus model: oneplus
vendor: google model: android
vendor: google model: pixel
db: NVD ids: CVE-2025-36911

Hackers Exploiting Ivanti EPMM Devices to Deploy Dormant Backdoors

Trust: 3.5

Fetched: Feb. 10, 2026, 9:16 a.m., Published: Feb. 10, 2026, 10:02 a.m.
 Vulnerabilities: authentication bypass, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-35081, CVE-2023-35078

CVE-2025-41653: Denial-of-Service Vulnerability in Device Web Server Functionality - Ameeba Exploit Tracker

Trust: 3.25

Fetched: Feb. 10, 2026, 9:16 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-41653

Surface Laptop 6 gets new (February 03, 2026) firmware updates

Trust: 4.75

Fetched: Feb. 10, 2026, 9:16 a.m., Published: Feb. 3, 2026, midnight
 Vulnerabilities: denial of service, code execution, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2024-21864, CVE-2024-44074

Dutch Authorities Confirm Ivanti Zero-Day Exploit Exposed Employee Contact Data

Trust: 4.0

Fetched: Feb. 10, 2026, 9:13 a.m., Published: Feb. 10, 2026, 8:22 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2026-1281, CVE-2026-1340