Skip to main content

THE SOTH JOURNAL

Internet of Things

Ideas, know-how, and a little inspiration for your connected home.

WORTH A CLOSER LOOK

Internet of Things

Seven WAVLINK routers and access points get command injection CVEs with public exploits and no fixes listed

Seven OS command injection vulnerabilities in WAVLINK routers, mesh units and access points were published on 1 and 2 November 2026. All of them came through VulDB, each links to a proof-of-concept write-up on GitHub (six of the seven by a researcher using the name pipiyyb), and each record says the exploit is public. The records say WAVLINK was co
Nov 2, 2026
3
min read

matter.js controllers now refuse untrusted certification declarations and malformed device certificates during pairing

When a Matter controller pairs a new device, it checks the device's identity before letting it in. The device presents a Device Attestation Certificate (DAC), signed by a Product Attestation Intermediate (PAI), plus a Certification Declaration (CD) signed by the Connectivity Standards Alliance. On 31 October 2026 matter.js, the open-source TypeScri
Nov 1, 2026
3
min read

OpenThread Border Router v2026.11.0 can serve its REST API on a Unix socket and reports Thread 1.4.1 route diagnostics

The OpenThread project published OpenThread Border Router (ot-br-posix) v2026.11.0 on 1 November 2026. This is the open-source border router that many Thread setups run underneath, including Home Assistant's OpenThread Border Router add-on and plenty of DIY builds on a Raspberry Pi with a radio co-processor. The monthly release has two changes wort
Nov 1, 2026
3
min read

Xiaomi's Smart Doorbell 4 Pro adds a downward-facing second camera for parcels and a battery rated at about 172 days

Xiaomi has put a dual-camera version of its battery video doorbell on sale in China. The Smart Doorbell 4 Pro Dual Camera Edition went on sale on the evening of 30 October 2026, according to IT Home, at a list price of 499 yuan, with a launch price of 439 yuan. The single-camera Smart Doorbell 4 Pro came out last year. Neither source mentions a rel
Oct 31, 2026
3
min read

Waveshare's 10.1-inch touch display turns the Arduino UNO Q into a panel with speakers and two camera ports

Waveshare has released the UNO-Q-DSI-TOUCH-10.1A, a 10.1-inch touch screen built for the Arduino UNO Q. The board plugs straight into the bottom of the display, so there is no need for the Arduino UNO Media Carrier that normally sits between the UNO Q and its MIPI display and camera connectors. CNX Software covered the launch on 31 October 2026. Wa
Oct 31, 2026
3
min read

Trane's new monitoring kit adds eight sensors and a cellular link to almost any older furnace or air conditioner

Trane and American Standard, the two residential heating and cooling brands of Trane Technologies, launched the HVAC Performance Monitoring Kit on 30 October 2026. It is a retrofit add-on for existing systems: the company says it fits virtually any 24 V non-communicating HVAC system, whatever the brand or age. That covers the common single-stage, t
Oct 31, 2026
3
min read