PatchTheCVEriot-os vulnerabilities
Recent CVEs affecting riot-os products. 8 tracked.
riot-os has 8 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-02-04. Highest priority: CVE-2025-66647 (score 60/100).
- CVE-2025-66647 CRITICAL 9.8 UPGRADE RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi
- CVE-2025-66646 HIGH 7.5 UPGRADE RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi
- CVE-2026-22214 CRITICAL 9.8 UPGRADE RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in
- CVE-2026-22213 CRITICAL 9.8 UPGRADE RIOT OS versions up to and including 2026.01-devel-317 contain a stack-based buffer overflow vulnerability in
- CVE-2026-25139 CRITICAL 9.1 UPGRADE RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi
- CVE-2025-53888 CRITICAL 9.8 UPGRADE RIOT-OS, an operating system that supports Internet of Things devices, has an ineffective size check implement
- CVE-2024-53980 HIGH 7.5 UPGRADE RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi
- CVE-2024-52802 HIGH 7.5 UPGRADE RIOT is an operating system for internet of things (IoT) devices
FAQ
How do I fix riot-os vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is riot-os being exploited right now?
None of the tracked riot-os CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which riot-os CVE should I patch first?
CVE-2025-66647 currently ranks highest (60/100): RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Thi.