ThreatVectr
Tag

#CERT/CC

4 stories taggedCERT/CC.

A pair of small wireless earbuds sitting on a desk with a smartphone displaying Bluetooth connection settings nearby, surrounded by concentric RF signal waves i
Vulnerabilities

Skullcandy Dime 3 earbuds let strangers pair over Bluetooth with no PIN, and owners can't patch them

A flaw in the Airoha chip inside Skullcandy's popular Dime 3 earbuds lets anyone nearby connect silently and listen through the microphone. Skullcandy has a fix, but no way for customers to install it.

4 min read
A video player interface rendered in a web browser window, displaying code injection points where serialized data is being deserialized without validation, with
Vulnerabilities

Two unpatched flaws in Kaltura's video player let attackers read files and run code

CERT/CC has gone public with a pair of bugs in Kaltura's mwEmbed library. Both trace back to the same old web-security sin: trusting user-supplied serialized data.

3 min read
Illustration: a black consumer Wi-Fi router sitting on a wooden desk in a dim home office
Vulnerabilities

A Secret Backdoor in Tenda Home Routers Lets Strangers Take Control, and There Is No Fix

A hidden login trick buried in Tenda networking gear gives anyone who knows the magic password full administrative control. The maker has not responded, and no patch exists.

3 min read
Illustration: a small black consumer Wi-Fi router on a plain desk, indicator lights glowing amber, softly lit from one side
Vulnerabilities

Hidden Admin Backdoor Found in Tenda Router Firmware, CERT/CC Warns

CVE-2026-11405 lets an attacker skip the password check entirely and seize full administrative control of affected Tenda routers through the web interface.

3 min read
© 2026 Threat Vectr