Bulletins

CISA (ALL)
10/01/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization.

The following versions of Meari IoT Cloud Platform OpenAPI Service are affected:

    …
CISA (ALL)
10/01/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to the database, execute arbitrary code on the host with the highest level of privilege, or gain control of the physical access-control system.

The following versions of Armatura LLC Armatura One …

CISA (ALL)
10/01/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks.

The following versions of Monta monta.app are affected:

  • monta.app vers:all/* (CVE-2026-95102, CVE-2026-97363, CVE-2026-97212, CVE-2026-93474)
…
CISA (ALL)
10/01/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges or overwrite files.

The following versions of ABB Protection and Control IED Manager PCM600 are affected:

  • Protection and Control IED Manager PCM600 <=2.14 (CVE-2026-15952, CVE-2026-15953)
…
CISA (ALL)
09/29/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, access user accounts, execute OS-level commands, or take full control over the device.

The following versions of Anjvision YSSD-RTMP-H5 are affected:

  • YSSD-RTMP-H5 firmware 3.3.2.4_build_2024-12-26 (CVE-2026-100291, CVE-2026-100292, CVE-2026-100293, CVE-2026-100294, CVE-2026-100295, …
CISA (ALL)
09/29/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow attackers to access, modify, or delete sensitive user data and critical system files, potentially compromising the operation of the entire platform.

The following versions of Viidure Dashcam Android Application are affected:

  • Dashcam Android Application <=3.3.1.260403 …
CISA (ALL)
09/29/2026

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to replace software and execute arbitrary code with root privileges.

The following versions of Lantronix G520 Series Cellular Gateway are affected:

  • G520 Series 2.6.0.4R6_stable (CVE-2026-84409, CVE-2026-91191)
…
CVSS
CISA (ALL)
09/29/2026

View CSAF

Summary

Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system.

The following versions of VIVOTEK Camera Firmware are affected:

  • V Series model_FD9187 (CVE-2026-22755)
  • …