CISA warns of critical flaws in EOL USR-W610 IoT servers. CVE-2026-25715 allows full admin control via blank passwords. No patches planned; isolate now.
IoT Vulnerability
Critical unpatched flaws in Vivotek IP7137 cameras allow unauthorized live streaming (CVE-2025-66049). Disconnect these EOL devices immediately.
Critical flaw CVE-2025-15471 (CVSS 9.8) in Trendnet TEW-713RE allows unauthenticated attackers to execute root commands via a single HTTP request.