[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGsQJExeJv7ZqCsiGdp7HWpFS_gJt3XZxPkYQtTSzcKY":3},{"article":4,"iocs":48,"watch_terms":71,"solutions":72,"lesson":168},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"e48cdb18-e9fc-43a7-8a69-a4c60cffdbab","Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices","unpatched-flaws-disclosed-in-filesystem-bundled-into-millions-of-embedded-device-d46c21","Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write the FAT and exFAT formats used on USB drives and SD cards. The flaws matter because FatFs is nearly everywhere. It ships inside the firmware that runs security cameras, drones, industrial controllers, hardware crypto wallets, and other devices built on","Security firm runZero has disclosed seven vulnerabilities in the FatFs filesystem library, which is integrated into millions of embedded devices like security cameras, drones, and crypto wallets. These flaws, rated Medium to High, can lead to memory corruption and code execution, potentially giving attackers full control over vulnerable devices. Despite efforts to contact the maintainer and involve JPCERT\u002FCC, there is no upstream fix for most of the critical bugs, leaving downstream vendors responsible for patching their products.","Seven unpatched vulnerabilities disclosed in FatFs filesystem library affect millions of embedded devices.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F07\u002Funpatched-flaws-disclosed-in-filesystem.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiJGo3ti2B3O-v3XpxdiFLMhvMVB_Ee5mmTlis-Qls6K8auWLQtPb4DSLL4snqvuZSxEvYXbGVBiUvRH1wBiw53ovRi-KTpdb0WqPwkZMkA_eHTSkTQVPkexu02-I2u7wc7PKESGKFZxlKRjR1SAkgOK50kIfpqZ9wcEjZCYBWIh6u_L82tXa8WfgUIhmA\u002Fs1600\u002Ffatfs.jpg","2026-07-03T20:19:31+00:00","2026-07-03T22:00:20.565982+00:00",9,[17,20,22,24,26,28],{"name":18,"type":19},"FatFs","product",{"name":21,"type":19},"ESP-IDF",{"name":23,"type":19},"STM32Cube",{"name":25,"type":19},"Zephyr",{"name":27,"type":19},"MicroPython",{"name":29,"type":19},"ArduPilot","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,41,43],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[49,53,56,59,62,65,68],{"type":50,"value":51,"context":52},"cve","CVE-2026-6682","FAT32 mount integer overflow leading to memory corruption and possible code execution.",{"type":50,"value":54,"context":55},"CVE-2026-6687","exFAT volume-label field overflows a small buffer, giving an attacker a clean memory-corruption foothold.",{"type":50,"value":57,"context":58},"CVE-2026-6688","long filenames overflow the wrapper code many projects put around FatFs.",{"type":50,"value":60,"context":61},"CVE-2026-6685","math wrap in cache handling on fragmented volumes that can silently corrupt data.",{"type":50,"value":63,"context":64},"CVE-2026-6683","exFAT divide-by-zero that crashes the device, potentially bricking hardware.",{"type":50,"value":66,"context":67},"CVE-2026-6686","file extended past its end can leak leftover data from previously deleted files.",{"type":50,"value":69,"context":70},"CVE-2026-6684","malformed GPT partition table can hang the device during mount.",[18,21,23],{"controls":73,"vendors":161},[74,103,132],{"slug":75,"name":76,"problem":77,"products":78},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":104,"name":105,"problem":106,"products":107},"patch-management","Automated patch management","Known holes get closed in days, not months.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":133,"name":134,"problem":135,"products":136},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[137,145,153],{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",{"vendor_slug":146,"vendor_name":147,"vendor_logo":148,"product_slug":149,"product_name":150,"url":151,"description":152},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",{"vendor_slug":154,"vendor_name":155,"vendor_logo":156,"product_slug":157,"product_name":158,"url":159,"description":160},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",[162],{"slug":163,"name":164,"logo_path":165,"roles":166},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png",[167],"reported_by",{"slug":169,"title":170,"body":171,"framework_refs":172,"framework_notes":183},"unpatched-fatfs-flaws-leave-millions-of-embedded-devices-exposed","Unpatched FatFs Flaws Leave Millions of Embedded Devices Exposed","Seven vulnerabilities in the widely-used FatFs filesystem library highlight a critical weakness in embedded device supply chains: when a foundational open-source component goes unpatched, every downstream product built on it inherits the risk. The flaws—capable of enabling memory corruption and full code execution—have no upstream fix, shifting the patching burden entirely to individual device vendors who may lack the resources or motivation to respond quickly. This scenario is especially dangerous for embedded devices like security cameras and crypto wallets, which often lack update mechanisms and are deployed in sensitive environments. The inability to reach the maintainer underscores the fragility of depending on unmaintained or under-resourced open-source projects in critical hardware. Without coordinated disclosure processes and clear vendor accountability, millions of devices may remain permanently vulnerable.",[173,174,175,176,177,178,179,180,181,182],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 16: Application Software Security","NIST SP 800-161: Cybersecurity Supply Chain Risk Management","NIST SP 800-53 SA-12: Supply Chain Protection","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NTIA SBOM Minimum Elements Guidance","ISO\u002FIEC 27001 A.12.6.1: Management of Technical Vulnerabilities","ENISA Good Practices for Security of IoT",{}]