Decision Insights Threat Desk

Redmi Buds 3 Pro–6 Pro contain RFCOMM flaws that can leak call data or trigger firmware crashes over Bluetooth.

BeeS patched an SQL injection in its BET portal and applied automatic updates; clients do not need to take action.

CVE-2025-14026: Forcepoint One DLP Client's bundled Python runtime can be modified to enable arbitrary code execution.

A firmware-upload error in TOTOLINK EX200 can start an unauthenticated root telnet service and allow full system access.

UEFI firmware flaws can prevent IOMMU initialization, letting PCIe devices access memory before the OS loads.

Siemens Gridscale X Prepay has username-enumeration and account-lock bypass flaws that can allow continued access after lock.