On 15 October 2026 NVD published CVE-2026-111281 against Jooan JA-A12 IP cameras on firmware builds 009_20171107 and 05.02.31.105. VulnCheck rates it 9.3 on CVSS v4.0. Anyone who can reach the camera's local HTTP interface can enable a vendor diagnosis mode with credentials baked into the Cam720 Android app, then feed shell commands to the jooandia
Frigate, the open-source NVR that many Home Assistant users run for local object detection on their cameras, released version 0.18.2 late on 15 October 2026 (UTC). It fixes three security flaws published the same evening, two of them rated critical. Both critical bugs affect only 0.18.0 and 0.18.1. The Frigate add-on for Home Assistant moved to 0.1
Eufy, Anker's smart home brand, has launched the E10 Window Camera, a small wired camera that sticks to the inside of a window and watches the driveway, front garden or entrance from indoors. TechRadar and T3 reported the launch on 14 October 2026. The camera costs $79.99 or £69.99, and a two-pack costs $149.99 or £129.99. It is already on sale in
Aqara’s Smart Lock U600 is on sale in the UK for £229.99. It is built for British multipoint doors on uPVC, composite and timber frames, and it speaks Matter over Thread with Apple Home Key and Samsung Wallet Key. Coverage on 14 October 2026 put the lock on Amazon.co.uk and Aqara’s UK channels at that price.
TP-Link published a security advisory on 14 October 2026 for CVE-2026-108473, a missing-authentication flaw (CWE-306) in the local device-management protocol of 24 Kasa smart plugs, power strips, wall switches, bulbs and light strips. An attacker on the same local network can send management commands without logging in and change a device's state o
Espressif published esp-pqc on 14 October 2026, an ESP-IDF component that adds the two NIST post-quantum algorithms, ML-KEM (FIPS 203) and ML-DSA (FIPS 204), to existing Espressif chips. It runs entirely in software, so you can try post-quantum TLS 1.3 and an extra firmware signature check at boot without waiting for new silicon. Espressif position
TP-Link published a security advisory on 14 October 2026 for CVE-2026-109506, an authentication flaw in the web management of its RE-series Wi-Fi range extenders. Someone on the same local network who captures a legitimate administrator login can derive a credential that the extender accepts, and log in to its management page with administrator rig
Ubiquiti has published Security Advisory Bulletin 070 for the UniFi Protect AI Key, the add-on box that runs object, person and licence plate detection and footage search locally for UniFi Protect cameras. The bulletin covers six vulnerabilities. According to the records published in the US National Vulnerability Database (NVD) on 14 October 2026,
On 13 October 2026 Apple announced Apple Home Collection: cameras, a video doorbell, a deadbolt, thermostats and room sensors designed with LG Electronics and Schneider Electric. Setup starts with an NFC tap from iPhone; control stays in the Apple Home app with no separate vendor account. Sales begin in December, with some accessories in early 2027
