importantSYS.SOURCE: The Hacker News• 2026-07-16T14:53:19+05:30

Unpatched IoT Vulnerability in Shark Vacuums Enables Regional Remote Code Execution

#iot security #aws security #vulnerability #remote code execution #device security

An unpatched IoT vulnerability in Shark vacuums allows attackers to execute arbitrary commands on devices within the same AWS region by exploiting misconfigured certificates. The flaw remains unresolved four months after disclosure, with no CVE identifier or official patch from SharkNinja.

Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on other people's Shark vacuums across the same AWS region: watch the camera, drive the robot, read the map of the house, and take the Wi-Fi password in plaintext.

A researcher publishing under the handle tokay0 put the method online on Monday, having tested it only against vacuums he

Read original article

*** END OF TRANSMISSION ***

> UK GOVERNMENT NATIONALIZES BRITISH STEEL TO SECURE PRIMARY STEEL PRODUCTION CAPACITY > THE PSYCHOLOGICAL AND PHILOSOPHICAL DIMENSIONS OF CREATIVE PROCESS AND ITS LASTING IMPACT > SPACEX STOCK DROPS BELOW IPO PRICE AMID INTRADAY VOLATILITY > LLM CRITICS' VALID CONCERNS AND THE PERSISTENT USE OF LARGE LANGUAGE MODELS > BUILDING A HOME-BASED DATABASE CLONING SYSTEM USING CEPH AND KUBERNETES > AINA RAISES $5.5M FOR AI AGENT-CONTROL DEVICES, SHIFTING FOCUS FROM CONTEXT CAPTURE TO ACTION-ORIENTED HARDWARE > META IMPLEMENTS PARENTAL ALERTS FOR TEEN SUICIDE/SELF-HARM DISCUSSIONS WITH AI CHATBOT > MUSKLR INTRODUCES LOCK SCREEN WORKOUT TRACKING VIA LIVE ACTIVITY ON IPHONE > ENTE RELEASES BUSINESS METRICS: REVENUE, CUSTOMER, AND ACCOUNT TRANSPARENCY > ONEPLUS SUSPENDS OPERATIONS IN KEY MARKETS: USA AND EUROPE> UK GOVERNMENT NATIONALIZES BRITISH STEEL TO SECURE PRIMARY STEEL PRODUCTION CAPACITY > THE PSYCHOLOGICAL AND PHILOSOPHICAL DIMENSIONS OF CREATIVE PROCESS AND ITS LASTING IMPACT > SPACEX STOCK DROPS BELOW IPO PRICE AMID INTRADAY VOLATILITY > LLM CRITICS' VALID CONCERNS AND THE PERSISTENT USE OF LARGE LANGUAGE MODELS > BUILDING A HOME-BASED DATABASE CLONING SYSTEM USING CEPH AND KUBERNETES > AINA RAISES $5.5M FOR AI AGENT-CONTROL DEVICES, SHIFTING FOCUS FROM CONTEXT CAPTURE TO ACTION-ORIENTED HARDWARE > META IMPLEMENTS PARENTAL ALERTS FOR TEEN SUICIDE/SELF-HARM DISCUSSIONS WITH AI CHATBOT > MUSKLR INTRODUCES LOCK SCREEN WORKOUT TRACKING VIA LIVE ACTIVITY ON IPHONE > ENTE RELEASES BUSINESS METRICS: REVENUE, CUSTOMER, AND ACCOUNT TRANSPARENCY > ONEPLUS SUSPENDS OPERATIONS IN KEY MARKETS: USA AND EUROPE