Critical Lexmark printer flaws CVE-2025-65078 (CVSS 9.3) & CVE-2025-65077 allow remote code execution. Update firmware immediately to protect your network.
firmware update
TP-Link discloses command injection flaws in Archer BE230 routers (CVE-2026-0630). Authenticated attackers can gain root access. Update firmware now.
Hikvision patches high-severity command injection (CVE-2026-0709) in DS-3WAP access points. Authenticated attackers can execute code. Update now.
Critical KiloView flaw CVE-2026-1453 (CVSS 9.8) allows unauthenticated admin takeover. Broadcast feeds at risk. Check affected E1/E2 versions immediately.
TP-Link patches CVE-2025-14756 (CVSS 8.5) in Archer MR600 routers. This command injection flaw allows full device takeover. Update firmware now.
Critical Alert: Browan PrismX MX100 has hard-coded credentials (CVE-2026-1221, CVSS 9.8). Attackers can access DBs remotely. Update to 1.03.23.01.
TP-Link patches critical VIGI camera flaw (CVE-2026-0629). LAN attackers can reset admin passwords and hijack feeds. Update firmware now.
WhisperPair flaw (CVE-2025-36911) exposes Google Fast Pair devices to hijacking and tracking. Update your headphone firmware now to block silent attacks.
Canon warns of 7 critical flaws (CVSS 9.8) in imageCLASS & i-SENSYS printers. Unauthenticated RCE risk. Update firmware immediately to secure devices.
Critical HPE Instant On update fixes DoS flaw CVE-2025-37166 that forces hard resets. Firmware 3.3.2.0 also stops config leaks. Check your version now.
MediaTek's Jan 2026 bulletin reveals critical modem flaws and memory corruption risks across dozens of chipsets. Update your device to stay safe!
JD Cloud alerts users to CVE-2025-66848, a 9.8 critical flaw allowing remote attackers to bypass auth and gain root access on NAS routers.
CISA issues a 9.8 severity alert for WHILL wheelchairs! CVE-2025-14346 lets attackers hijack controls via Bluetooth. Update your firmware now.
ERNW exposes "Headphone Jacking," a critical Airoha RACE flaw in Sony & JBL chips allowing hackers to eavesdrop and hijack connected smartphones.
NVIDIA patches 14 flaws in DGX Spark, including a critical SROOT bug (CVSS 9.3) allowing total system takeover. Update to OTA0 immediately.
TP-Link has patched a high-severity flaw (CVE-2025-8627) in its KP303 Smart Plug. The vulnerability allows remote attackers to issue unauthenticated commands.
Microsoft has released a firmware update for the Surface Pro 11 and Laptop 7, enabling a new Smart Charging feature to extend battery life.
A TPM 2.0 flaw (CVE-2025-2884) allows local attackers to access sensitive memory or cause DoS. Update TPM firmware to protect trusted computing.
ABB warns of a critical session fixation vulnerability (CVE-2024-13967) in EIBPORT V3, allowing unauthorized access. Update to firmware 3.9.9 immediately.
Lexmark CVE-2025-1127 flaw allows remote code execution via embedded web server. Affects many printer models—patch firmware to version .240.206+ now.
Siemens RUGGEDCOM devices face CVSS 9.9 command injection flaws. Authenticated users can execute root-level code via web tools. Patch to V2.16.5 now.