Front-End Developer

Router CVE Weekly Digest - Sep 21-27, 2026. Published September 28, 2026 · Covering Sep 21-27, 2026 · RouterCVE Weekly Digest 25 CVEs 11 Critical 11 High Affected vendors. * Lantronix: 13 CVEs (10 critical, 3 high) * Ubiquiti: 6 CVEs (all high) * OpenWrt / DD-WRT: 2 CVEs (all high) * ASUS: 2 CVEs (unscored) * Fortinet: 1 CVE (critical) * Cisco: 1 CVE (unscored) Critical alert: Lantronix serial console servers under siege. This week saw a critical vulnerability flood affecting Lantronix serial console and embedded management devices. Ten critical vulnerabilities have been disclosed, affecting the SLC8000, SLC9000, EMG8500, EMG7500, SLB882, and SLCx-series devices. Organizations managing remote infrastructure with Lantronix appliances should treat this as an urgent priority. The most severe issue is CVE-2026-80155 (CVSS 10.0), an authentication bypass in the web management portal affecting SLC8000 before v9.7.0.5, SLC9000 before v9.7.0.2, EMG8500/EMG7500 before v9.7.0.1, and all firmware versions of SLB882, SLCx-03, and SLCx-02. A perfect 10.0 score means unauthenticated remote attackers can gain full administrative access. Compounding the problem are multiple command injection flaws - CVE-2026-80143, CVE-2026-80144, CVE-2026-80151, and CVE-2026-80152 (all CVSS 9.1-9.9) - plus stack-based buffer overflow vulnerabilities (CVE-2026-80146 and CVE-2026-80147, both CVSS 9.9) and path traversal exposure (CVE-2026-80156, CVSS 9.1). An unauthenticated attacker could chain these for complete device compromise. Critical devices with "all firmware versions" exposure (SLB882, SLCx-03, SLCx-02) have no patch available yet. For SLC8000 and SLC9000 users, firmware updates to v9.7.0.5 and v9.7.0.2 respectively are now available and should be deployed immediately. EMG8500/EMG7500 users should update to v9.7.0.1 or later. Immediate action items: * Audit your network for exposed Lantronix devices; these are typically management appliances and should never be internet-facing * Check firmware versions immediately against the thresholds listed above * Apply available patches without delay * For devices with no patch available, implement strict network access controls and consider disabling web management if out-of-band access is available * Review access logs for any unauthorized access attempts Ubiquiti UniFi gateways: six memory safety issues. Ubiquiti released six high-severity vulnerabilities (all CVSS 7.5) affecting UniFi gateway devices. These include uncontrolled recursion (CVE-2026-95861), out-of-bounds write flaws (CVE-2026-95862, CVE-2026-77544, CVE-2026-77555), and out-of-bounds read vulnerabilities (CVE-2026-77556, CVE-2026-77558). While rated "high" rather than critical, these memory safety issues could allow local network attackers to execute code on gateway devices. Check your UniFi controller for available firmware patches and schedule updates for affected gateways in your fleet. OpenWrt and Fortinet extensions. CVE-2026-55159 (CVSS 8.8) affects luci-app-adblock-fast before v1.2.4, and CVE-2026-55897 (CVSS 8.8) impacts luci-app-advanced-reboot on OpenWrt. Both are high-severity and warrant updates if you use these community packages. Fortinet's CVE-2026-84388 (CVSS 9.6) is a clickjacking vulnerability in FortiPAM Chrome Extension versions 7.4 and 8.0. While not a router CVE directly, it affects managed infrastructure. Update the extension to the patched version.

North Wales IT firm shortlisted for three customer awards. 25th September The Layer 4 team (Image: "PAUL WORPOLE 07740076765") An IT company has been recognised for its personal approach to customer service. Layer 4, based in North Wales, has been shortlisted in three categories at the North Wales, Chester & Wirral Customer Experience Awards. The company is a finalist for Best Customer-Centred Culture, Best B2B Customer Experience, and Best Small Business Customer Experience. Mark Hill, managing director of Layer 4, said: "To be shortlisted in three categories at the first North Wales, Chester & Wirral Customer Experience Awards is something the whole team can be proud of. "Layer 4 was created because we believed business technology support could be more personal. "When a customer contacts us, there is a business, an employee or an important service behind that request. "Understanding that wider impact shapes how we respond." Layer 4 provides managed IT support, cloud computing, cybersecurity, connectivity, phone systems and business mobiles. The company was founded on the belief that no customer should ever feel like "just another ticket." Directors work alongside the wider team in an open-plan environment and remain closely involved in customers' day-to-day experiences. This approach has helped the company achieve a Net Promoter Score of 84 over the past 12 months, maintain 100 per cent customer retention since its inception, and earn more than 40 five-star Google reviews. Layer 4 is a Microsoft partner and works with leading technology providers including WatchGuard, Barracuda, Datto, Dell, Ubiquiti, Gamma and RingCentral. The company also holds Cyber Essentials Plus certification. A spokesperson said the three nominations reflect the company's commitment to delivering responsive, personal support while helping organisations across the UK, Ireland and Europe use technology securely and effectively.

How to Add Smart AI Monitoring to UniFi Protect CCTV for $20/mo. Connect your UniFi Protect cameras (G4, G5, Bullet, Dome) to AegisGates AI in 5 minutes via RTSP. Get real-time event narratives and smart safety alerts for $20/mo per camera. Overview. Ubiquiti's UniFi Protect ecosystem is widely celebrated for its clean hardware aesthetics, intuitive web interfaces, and local video storage with zero mandatory cloud subscriptions, making it a favorite for modern businesses, schools, and facility managers. However, while UniFi cameras (like the G4 Pro, G5 Bullet, and AI Theta) have built-in optical sensors, their native notifications are often limited to basic person/vehicle tags. They lack contextual reasoning - such as detecting safety compliance breaches, after-hours loitering, unattended packages, or subtle behavioral risks. By integrating UniFi Protect with AegisGates Vision AI, you gain enterprise-grade narrative intelligence and real-time smart alerts for just $20/month per camera, while preserving your local UniFi recording setup. Key Benefits of UniFi + AegisGates AI. * Contextual Narratives: Understand *what* people are doing on camera, not just that a person was seen. * Keep Local Storage: Your UniFi Dream Machine (UDM-Pro / SE) or Cloud Key Gen2+ continues recording 24/7 video locally. * Custom Watch Rules: Define specific instructions using plain English (e.g., *"Alert if any child approaches the perimeter gate alone"* - see its Childcare Safety Monitoring solutions). * No Ecosystem Lock-in: Connect UniFi cameras alongside other camera brands in one unified AI dashboard. Step 1: open Your UniFi Protect application. * Open your web browser and navigate to your UniFi Console (e.g., https://unifi.local or your Dream Machine IP). * Click on the Protect application icon. * In the left navigation menu, click on UniFi Devices to see your list of connected cameras. Step 2: Enable RTSP streaming on the camera. UniFi Protect allows you to generate local RTSP/RTSPS streams for any connected camera: * Click on the camera you wish to connect to AegisGates. * In the right-hand panel that slides out, click the Settings tab. * Scroll down and click on Advanced. * Locate the RTSP or Real-Time Streaming Protocol section. * Toggle ON the resolution stream you wish to use: * Medium / Low: Recommended for real-time AI processing (reduces bandwidth overhead while maintaining crystal-clear object detection). * High: Suitable if your local network has abundant bandwidth. * A stream URL will appear, looking similar to: rtsps://192.168.1.1:7441/AbCdEfGhIjKlMnOp?enableSrtp Step 3: convert the RTSP URL for standard integration. UniFi Protect generates an encrypted rtsps:// link by default on port 7441. For standard third-party RTSP integration with AegisGates: * Change rtsps:// to standard rtsp://. * Change the port from 7441 to 7447. * Remove the trailing ?enableSrtp. * *Original UniFi Link:* rtsps://192.168.1.1:7441/yZ1234567890?enableSrtp * *Standard RTSP Link for AegisGates:* rtsp://192.168.1.1:7447/yZ1234567890 Step 4: verify stream in VLC. * Open VLC Media Player. * Press Ctrl + N to open Network Stream. * Paste the modified URL: rtsp://192.168.1.1:7447/yZ1234567890. * Press Play to verify the live video feed displays instantly. Step 5: Add Your UniFi stream to AegisGates. * Log in to AegisGates Vision AI. * Click Add Camera and select UniFi. * Paste your RTSP link into the camera configuration. * Set your notification channels (Telegram, Webhook, SMS, or Email). * Customize your monitoring instructions in the Special Attentions field. Within minutes, your UniFi Protect cameras will start delivering rich AI-generated summaries and instantaneous anomaly alerts directly to your phone. Related guides & multi-brand integration. Need to link other camera systems into your monitoring dashboard? Check out these resources: * Hikvision RTSP AI Detection Guide - Integrate Hikvision cameras and NVRs. * How to Add AI Detection to Any Reolink Camera - Upgrade Reolink systems for $20/mo. * Reolink RTSP & Credentials Setup Guide - Step-by-step Reolink RTSP guide. * TP-Link Tapo RTSP Setup Guide - Enable streaming on budget Tapo cameras. * Wyze Camera RTSP AI Alerts Guide - Connect Wyze cameras to AI vision. * Building & Property Management Security - Smarter security for modern commercial properties. Summary. Combining the outstanding hardware quality of UniFi with the intelligence of AegisGates Vision AI gives you the best of both worlds: local privacy and state-of-the-art vision analytics for $20/month per camera. Start your 7-day free trial today! unifi unifi protect unifi cctv ai integration ubiquiti udm pro rtsp smart security camera ai monitoring