Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices

Summary

Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write the FAT and exFAT formats used on USB drives and SD cards. The flaws matter because FatFs is nearly everywhere. It ships inside the firmware that runs security cameras, drones, industrial controllers, hardware crypto wallets, and other devices built on

SpinGraph analysis pending — check back after processing.

• 19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
• Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters
• SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
• New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos
• FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations
• AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack