Flaw in AVer PTC500S cameras allows remote code execution

TODAY'S critical alerts include four active exploits related to vulnerabilities: CVE-2025-67038 (Lantronix EDS5000), CVE-2026-34910, CVE-2026-34909, and CVE-2026-34908 (all Ubiquiti UniFi OS vulnerabilities). Notably, CVE-2026-40624 affects AVer PTC500S cameras, scoring a CVSS of 9.8, indicating a critical risk due to improper input validation that could lead to remote code execution. CISA has highlighted this flaw as serious due to its potential impact on government and healthcare networks. A firmware update is available, with recommended actions for users to isolate devices and monitor logs.