Recent findings revealed that three vulnerabilities in LG's webOS can be exploited to grant an attacker root access to specific smart TV models from the same local network, without any user interaction or the need for a PIN. The tested models include the 32LQ636BPSA and the 27TQ600SW, both operating on webOS version 7.5.7-25. LG has since released a security advisory and patch to address these critical vulnerabilities, which were disclosed by SSD Secure Disclosure on October 12.
For businesses, particularly those leveraging smart technology in their operations or hospitality services, this incident underscores the importance of maintaining robust cybersecurity practices. Organizations should prioritize regular software updates and vulnerability assessments of their connected devices, as the ease of exploitation demonstrated here can lead to severe data breaches and operational disruptions. This situation highlights the ongoing challenges in securing IoT devices and the need for heightened vigilance in cybersecurity strategies, especially as the integration of AI and smart technologies continues to expand across industries.
---
*Originally reported by [The Hacker News](https://thehackernews.com/2026/10/lg-smart-tvs-vulnerable-to-pre-auth.html)*