https://exploit-radar.com/en/flux/categories/soho-iot.xml Exploit Radar: Home and small-office routers, cameras and IoT The latest additions to CISA’s catalog of exploited vulnerabilities in the “Home and small-office routers, cameras and IoT” category (indicative classification). 2026-07-21T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2021-27137/ CVE-2021-27137 — DD-WRT 2026-07-21T00:00:00Z Apply the patches or mitigations from DD-WRT; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 21, 2026. https://exploit-radar.com/en/cve/CVE-2025-29635/ CVE-2025-29635 — D-Link Routers (DIR, DWR, DSR) 2026-04-24T00:00:00Z Apply the patches or mitigations from D-Link; if none are available, stop using the product. For cloud services, follow the guidance from D-Link. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on April 24, 2026. https://exploit-radar.com/en/cve/CVE-2017-7921/ CVE-2017-7921 — Hikvision IP cameras and recorders (NVR/DVR) 2026-03-05T00:00:00Z Apply the patches or mitigations from Hikvision; if none are available, stop using the product. For cloud services, follow the guidance from Hikvision. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 5, 2026. https://exploit-radar.com/en/cve/CVE-2023-52163/ CVE-2023-52163 — Digiever DS-2105 Pro 2025-12-22T00:00:00Z Apply the patches or mitigations from Digiever; if none are available, stop using the product. For cloud services, follow the guidance from Digiever. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 22, 2025. https://exploit-radar.com/en/cve/CVE-2022-37055/ CVE-2022-37055 — D-Link Routers (DIR, DWR, DSR) 2025-12-08T00:00:00Z Apply the patches or mitigations from D-Link; if none are available, stop using the product. For cloud services, follow the guidance from D-Link. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 8, 2025. https://exploit-radar.com/en/cve/CVE-2025-4008/ CVE-2025-4008 — Smartbedded Meteobridge 2025-10-02T00:00:00Z Apply the patches or mitigations from Smartbedded; if none are available, stop using the product. For cloud services, follow the guidance from Smartbedded. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 2, 2025. https://exploit-radar.com/en/cve/CVE-2025-9377/ CVE-2025-9377 — TP-Link Archer (Wi-Fi routers) 2025-09-03T00:00:00Z Apply the patches or mitigations from TP-Link; if none are available, stop using the product. For cloud services, follow the guidance from TP-Link. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 3, 2025. https://exploit-radar.com/en/cve/CVE-2023-50224/ CVE-2023-50224 — TP-Link TL-WR (Wi-Fi routers) 2025-09-03T00:00:00Z Apply the patches or mitigations from TP-Link; if none are available, stop using the product. For cloud services, follow the guidance from TP-Link. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 3, 2025. https://exploit-radar.com/en/cve/CVE-2020-24363/ CVE-2020-24363 — TP-Link Range extenders and access points (TL-WA, RE) 2025-09-02T00:00:00Z Apply the patches or mitigations from TP-Link; if none are available, stop using the product. For cloud services, follow the guidance from TP-Link. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 2, 2025. https://exploit-radar.com/en/cve/CVE-2020-25079/ CVE-2020-25079 — D-Link DCS cameras 2025-08-05T00:00:00Z Apply the patches or mitigations from D-Link; if none are available, stop using the product. For cloud services, follow the guidance from D-Link. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 5, 2025. https://exploit-radar.com/en/cve/CVE-2022-40799/ CVE-2022-40799 — D-Link DNR video recorders (NVR) 2025-08-05T00:00:00Z Apply the patches or mitigations from D-Link; if none are available, stop using the product. For cloud services, follow the guidance from D-Link. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 5, 2025. https://exploit-radar.com/en/cve/CVE-2020-25078/ CVE-2020-25078 — D-Link DCS cameras 2025-08-05T00:00:00Z Apply the patches or mitigations from D-Link; if none are available, stop using the product. For cloud services, follow the guidance from D-Link. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 5, 2025. https://exploit-radar.com/en/cve/CVE-2024-0769/ CVE-2024-0769 — D-Link Routers (DIR, DWR, DSR) 2025-06-25T00:00:00Z Apply the patches or mitigations from D-Link; if none are available, stop using the product. For cloud services, follow the guidance from D-Link. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 25, 2025. https://exploit-radar.com/en/cve/CVE-2023-33538/ CVE-2023-33538 — TP-Link TL-WR (Wi-Fi routers) 2025-06-16T00:00:00Z Apply the patches or mitigations from TP-Link; if none are available, stop using the product. For cloud services, follow the guidance from TP-Link. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 16, 2025. https://exploit-radar.com/en/cve/CVE-2021-32030/ CVE-2021-32030 — ASUS Routers (RT, GT, ZenWiFi) 2025-06-02T00:00:00Z Apply the patches or mitigations from ASUS; if none are available, stop using the product. For cloud services, follow the guidance from ASUS. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 2, 2025. https://exploit-radar.com/en/cve/CVE-2023-39780/ CVE-2023-39780 — ASUS Routers (RT, GT, ZenWiFi) 2025-06-02T00:00:00Z Apply the patches or mitigations from ASUS; if none are available, stop using the product. For cloud services, follow the guidance from ASUS. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 2, 2025. https://exploit-radar.com/en/cve/CVE-2024-12987/ CVE-2024-12987 — DrayTek Vigor (routers) 2025-05-15T00:00:00Z Apply the patches or mitigations from DrayTek; if none are available, stop using the product. For cloud services, follow the guidance from DrayTek. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 15, 2025. https://exploit-radar.com/en/cve/CVE-2024-11120/ CVE-2024-11120 — GeoVision Cameras and video servers 2025-05-07T00:00:00Z Apply the patches or mitigations from GeoVision; if none are available, stop using the product. For cloud services, follow the guidance from GeoVision. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 7, 2025. https://exploit-radar.com/en/cve/CVE-2024-6047/ CVE-2024-6047 — GeoVision Cameras and video servers 2025-05-07T00:00:00Z Apply the patches or mitigations from GeoVision; if none are available, stop using the product. For cloud services, follow the guidance from GeoVision. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 7, 2025. https://exploit-radar.com/en/cve/CVE-2025-1316/ CVE-2025-1316 — Edimax IC-7100 IP Camera 2025-03-19T00:00:00Z Apply the patches or mitigations from Edimax; if none are available, stop using the product. For cloud services, follow the guidance from Edimax. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 19, 2025. https://exploit-radar.com/en/cve/CVE-2023-20118/ CVE-2023-20118 — Cisco RV routers (Small Business) 2025-03-03T00:00:00Z Apply the patches or mitigations from Cisco; if none are available, stop using the product. For cloud services, follow the guidance from Cisco. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 3, 2025. https://exploit-radar.com/en/cve/CVE-2024-40890/ CVE-2024-40890 — Zyxel Home gateways and routers (DSL, CPE) 2025-02-11T00:00:00Z Apply the patches or mitigations from Zyxel; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 11, 2025. https://exploit-radar.com/en/cve/CVE-2024-40891/ CVE-2024-40891 — Zyxel Home gateways and routers (DSL, CPE) 2025-02-11T00:00:00Z Apply the patches or mitigations from Zyxel; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 11, 2025. https://exploit-radar.com/en/cve/CVE-2019-11001/ CVE-2019-11001 — Reolink IP cameras 2024-12-18T00:00:00Z Apply the patches or mitigations from Reolink; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 18, 2024. https://exploit-radar.com/en/cve/CVE-2021-40407/ CVE-2021-40407 — Reolink IP cameras 2024-12-18T00:00:00Z Apply the patches or mitigations from Reolink; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 18, 2024. https://exploit-radar.com/en/cve/CVE-2018-14933/ CVE-2018-14933 — NUUO NVRmini / NVRmini2 2024-12-18T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on December 18, 2024. https://exploit-radar.com/en/cve/CVE-2022-23227/ CVE-2022-23227 — NUUO NVRmini / NVRmini2 2024-12-18T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on December 18, 2024. https://exploit-radar.com/en/cve/CVE-2024-8956/ CVE-2024-8956 — PTZOptics PT30X-SDI/NDI Cameras 2024-11-04T00:00:00Z Apply the patches or mitigations from PTZOptics; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 4, 2024. https://exploit-radar.com/en/cve/CVE-2024-8957/ CVE-2024-8957 — PTZOptics PT30X-SDI/NDI Cameras 2024-11-04T00:00:00Z Apply the patches or mitigations from PTZOptics; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 4, 2024. https://exploit-radar.com/en/cve/CVE-2020-15415/ CVE-2020-15415 — DrayTek Vigor (routers) 2024-09-30T00:00:00Z Apply the patches or mitigations from DrayTek; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 30, 2024. https://exploit-radar.com/en/cve/CVE-2023-25280/ CVE-2023-25280 — D-Link Routers (DIR, DWR, DSR) 2024-09-30T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on September 30, 2024. https://exploit-radar.com/en/cve/CVE-2021-20123/ CVE-2021-20123 — DrayTek VigorConnect 2024-09-03T00:00:00Z Apply the patches or mitigations from DrayTek; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 3, 2024. https://exploit-radar.com/en/cve/CVE-2021-20124/ CVE-2021-20124 — DrayTek VigorConnect 2024-09-03T00:00:00Z Apply the patches or mitigations from DrayTek; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 3, 2024. https://exploit-radar.com/en/cve/CVE-2021-33044/ CVE-2021-33044 — Dahua IP Camera Firmware 2024-08-21T00:00:00Z Apply the patches or mitigations from Dahua; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 21, 2024. https://exploit-radar.com/en/cve/CVE-2021-33045/ CVE-2021-33045 — Dahua IP Camera Firmware 2024-08-21T00:00:00Z Apply the patches or mitigations from Dahua; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 21, 2024. https://exploit-radar.com/en/cve/CVE-2014-100005/ CVE-2014-100005 — D-Link Routers (DIR, DWR, DSR) 2024-05-16T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on May 16, 2024. https://exploit-radar.com/en/cve/CVE-2021-40655/ CVE-2021-40655 — D-Link Routers (DIR, DWR, DSR) 2024-05-16T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on May 16, 2024. https://exploit-radar.com/en/cve/CVE-2016-20017/ CVE-2016-20017 — D-Link DSL modem-routers 2024-01-08T00:00:00Z Apply the patches or mitigations from D-Link; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 8, 2024. https://exploit-radar.com/en/cve/CVE-2023-47565/ CVE-2023-47565 — QNAP VioStor NVR 2023-12-21T00:00:00Z Apply the patches or mitigations from QNAP; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 21, 2023. https://exploit-radar.com/en/cve/CVE-2023-49897/ CVE-2023-49897 — FXC AE1021, AE1021PE 2023-12-21T00:00:00Z Apply the patches or mitigations from FXC; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 21, 2023. https://exploit-radar.com/en/cve/CVE-2014-8361/ CVE-2014-8361 — Realtek Router SDKs (Jungle, AP-Router) 2023-09-18T00:00:00Z Apply the patches or mitigations from Realtek; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 18, 2023. https://exploit-radar.com/en/cve/CVE-2017-6884/ CVE-2017-6884 — Zyxel Home gateways and routers (DSL, CPE) 2023-09-18T00:00:00Z Apply the patches or mitigations from Zyxel; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on September 18, 2023. https://exploit-radar.com/en/cve/CVE-2017-18368/ CVE-2017-18368 — Zyxel Home gateways and routers (DSL, CPE) 2023-08-07T00:00:00Z Apply the patches or mitigations from Zyxel; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on August 7, 2023. https://exploit-radar.com/en/cve/CVE-2019-17621/ CVE-2019-17621 — D-Link Routers (DIR, DWR, DSR) 2023-06-29T00:00:00Z Apply the update from D-Link; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 29, 2023. https://exploit-radar.com/en/cve/CVE-2019-20500/ CVE-2019-20500 — D-Link Access points (DAP, DWL) 2023-06-29T00:00:00Z Apply the update from D-Link; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 29, 2023. https://exploit-radar.com/en/cve/CVE-2023-1389/ CVE-2023-1389 — TP-Link Archer (Wi-Fi routers) 2023-05-01T00:00:00Z Apply the security update from TP-Link. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 1, 2023. https://exploit-radar.com/en/cve/CVE-2020-5741/ CVE-2020-5741 — Plex Media Server 2023-03-10T00:00:00Z Apply the security update from Plex. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 10, 2023. https://exploit-radar.com/en/cve/CVE-2018-6530/ CVE-2018-6530 — D-Link Routers (DIR, DWR, DSR) 2022-09-08T00:00:00Z Apply the update from D-Link; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on September 8, 2022. https://exploit-radar.com/en/cve/CVE-2017-5521/ CVE-2017-5521 — NETGEAR Routers (DGN, WNR, Nighthawk) 2022-09-08T00:00:00Z Apply the update from NETGEAR; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 8, 2022. https://exploit-radar.com/en/cve/CVE-2011-4723/ CVE-2011-4723 — D-Link Routers (DIR, DWR, DSR) 2022-09-08T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on September 8, 2022.