Unpatched High-Severity Flaws in FatFs Filesystem Threaten Millions of Embedded Devices

Security firm runZero has disclosed seven vulnerabilities, including CVE-2026-6682 (CVSS 7.6), in FatFs, a widely used filesystem library in firmware for security cameras, drones, industrial controllers, and other embedded devices. These flaws can lead to memory corruption and potential code execution, particularly with physical access via malformed USB drives or SD cards.