Naxclow IoT Platform
Multiple critical vulnerabilities discovered in Naxclow IoT Platform affect smart home devices.
CISA has issued an advisory detailing multiple critical vulnerabilities in the Naxclow IoT Platform, impacting devices like smart doorbells and home cameras. These flaws allow attackers to impersonate devices, intercept communications, harvest credentials, and gain unauthorized access. Naxclow has not responded to CISA's attempts to coordinate these vulnerabilities.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Naxclow?
Get an email when a new story names Naxclow, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonMultiple critical vulnerabilities in the Naxclow IoT Platform demonstrate how supply chain security failures can cascade into widespread device compromise. These flaws enable device impersonation, credential theft, and unauthorized access across smart home devices like doorbells and cameras. The vendor's failure to respond to CISA's coordination attempts highlights the challenge of securing IoT ecosystems where manufacturers may lack proper vulnerability response processes. Organizations deploying IoT devices must assume responsibility for security when vendors fail to act.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-42947
- cve — CVE-2026-50108
- cve — CVE-2026-50101
- cve — CVE-2026-28742
- cve — CVE-2026-42932
- cve — CVE-2026-50244
- cve — CVE-2026-50099