TP-Link published two security advisories for Tapo cameras on 19 October 2026, and the three flaws they describe reached the National Vulnerability Database the same day. Two affect the Tapo C210 with hardware version 3.6, one affects the Tapo C320WS with hardware version 2. Each of them needs an attacker on the same local network as the camera, an
A cheap Wi-Fi plug runs firmware you cannot audit, and many of them talk to a cloud you do not control. On a flat home network that plug sits next to your laptop, your NAS and your phone. Moving smart devices to their own VLAN means a compromised gadget can reach Home Assistant and nothing else.
A developer known as h0m3us3r has published w1700k-sdr, an open-source project that turns a Gemtek W1700K Wi-Fi 7 router into a wideband software-defined radio (SDR) receiver. CNX Software reported on it on 16 October 2026. The GitHub repository was created on 11 October. Instead of carrying Wi-Fi traffic, the router's radio captures raw samples an
On 16 October 2026 OPSWAT published the last part of its research into TP-Link's Tapo C200 and C120 cameras. The main flaw, CVE-2026-102369, is a command injection in a factory diagnostic service. On its own it needs administrator access, but an authentication bypass disclosed in August provides exactly that. Chained together, the two let an attack
Security researcher Quentin Kaiser presented a flaw in Broadcom's Wi-Fi software at the Hexacon conference in Paris on 16 October 2026 and published a full write-up the same day. The bug is in the code that reassembles fragmented WPS (Wi-Fi Protected Setup) EAP messages in Broadcom's proprietary 802.11 stack. An attacker within radio range can trig
The first install is the awkward part of ESPHome. You need a USB data cable, a browser that talks to serial ports, and a board that actually enters programming mode. After that, every change can go over the air. This guide covers installing the Device Builder, creating a first configuration, flashing over USB, joining Wi-Fi, and connecting the devi
Shelly USA opened North American sales of the Shelly Presence Gen4 on 15 October 2026. The mmWave radar presence sensor is $84.99 at us.shelly.com and is due at Micro Center, Best Buy, Newegg and Amazon soon. In Europe the same model (S4SN-0U61X) already sells for €69.90 in Shelly's EU store, so this is a regional launch rather than a brand-new pro
Three features merged into ESPHome's development branch on 14 and 15 October 2026 tackle problems many makers know well: radar zones limited to rectangles, typing a Wi-Fi password into a fallback hotspot, and firmware updates that die on a weak link. ESPHome 2026.10 is still in beta (2026.10.0b4 came out this week), so these changes are headed for
On 15 October 2026 NVD published CVE-2026-111281 against Jooan JA-A12 IP cameras on firmware builds 009_20171107 and 05.02.31.105. VulnCheck rates it 9.3 on CVSS v4.0. Anyone who can reach the camera's local HTTP interface can enable a vendor diagnosis mode with credentials baked into the Cam720 Android app, then feed shell commands to the jooandia
