Remote code execution vulnerabilities uncovered in smart air fryer (zdnet.com)

On the plus side, it looks like these vulnerabilities can't be exploited once the device has been fully set up (unless I'm misreading the reports).

But, still, we all know that the S in IOT stands for "security"