Seven OS command injection vulnerabilities in WAVLINK routers, mesh units and access points were published on 1 and 2 November 2026. All of them came through VulDB, each links to a proof-of-concept write-up on GitHub (six of the seven by a researcher using the name pipiyyb), and each record says the exploit is public. The records say WAVLINK was co
When a Matter controller pairs a new device, it checks the device's identity before letting it in. The device presents a Device Attestation Certificate (DAC), signed by a Product Attestation Intermediate (PAI), plus a Certification Declaration (CD) signed by the Connectivity Standards Alliance. On 31 October 2026 matter.js, the open-source TypeScri
TP-Link has started selling the Tapo T150 in Poland. The Polish press release went out on 28 October 2026, a week after the sensor launched in South Korea on 22 October. The price is about 150 zł, with a two-year warranty.
Zigbee2MQTT 2.14.3 came out on 1 November 2026, a month after 2.14.2. Most of it is the usual monthly batch of new devices and fixes. The part that needs action is at the top of the notes: running Zigbee2MQTT on a 32-bit system is now deprecated, and support ends in April 2027.
Plenty of heat pump spec sheets carry a small "SG Ready" logo. It sounds like a smart grid protocol, and people expect an app, a cloud service or at least a network port behind it. What you actually get is two terminals on the controller board. You close or open them with a relay, and the heat pump changes the way it runs.
The OpenThread project published OpenThread Border Router (ot-br-posix) v2026.11.0 on 1 November 2026. This is the open-source border router that many Thread setups run underneath, including Home Assistant's OpenThread Border Router add-on and plenty of DIY builds on a Raspberry Pi with a radio co-processor. The monthly release has two changes wort
Xiaomi has put a dual-camera version of its battery video doorbell on sale in China. The Smart Doorbell 4 Pro Dual Camera Edition went on sale on the evening of 30 October 2026, according to IT Home, at a list price of 499 yuan, with a launch price of 439 yuan. The single-camera Smart Doorbell 4 Pro came out last year. Neither source mentions a rel
Waveshare has released the UNO-Q-DSI-TOUCH-10.1A, a 10.1-inch touch screen built for the Arduino UNO Q. The board plugs straight into the bottom of the display, so there is no need for the Arduino UNO Media Carrier that normally sits between the UNO Q and its MIPI display and camera connectors. CNX Software covered the launch on 31 October 2026. Wa
Trane and American Standard, the two residential heating and cooling brands of Trane Technologies, launched the HVAC Performance Monitoring Kit on 30 October 2026. It is a retrofit add-on for existing systems: the company says it fits virtually any 24 V non-communicating HVAC system, whatever the brand or age. That covers the common single-stage, t