Smart Home Weekend Roundup: FCC Robot Ban and More

This was a week where regulators, not product launches, drove the biggest smart home headlines. The FCC moved to restrict future foreign-made robot vacuums, a critical router backdoor was disclosed affecting over 100,000 home networks, and Google confirmed it will begin shutting down Assistant on mobile devices next month. Add EU cybersecurity enforcement and a rare Android interoperability win, and the message is clear: the rules governing your smart home are changing fast.

FCC adds robot vacuums to national-security covered list

On July 28, 2026, the FCC added “advanced robotic devices” to its Covered List, the national-security equipment authorization list that effectively blocks new equipment authorizations for foreign-produced models. The scope is broad: most modern robot vacuums made abroad will no longer be eligible for fresh U.S. market entry. For homeowners, the immediate reassurance is clear — existing and currently authorized models are unaffected and will continue to be sold, updated, and supported. This is about the future product pipeline, not today’s purchases. The Verge argues the ban judges country of origin rather than cybersecurity posture, potentially shrinking consumer choice and raising prices, and contends that enforceable security rules — covering on-device maps, data retention, and audits — would be more effective than origin-based restrictions The Verge. IDC’s analysis provides additional context on the regulatory implications IDC analysis, while VacuumWars confirms that currently authorized devices remain on the market VacuumWars coverage. If your robot vacuum is part of a broader connected setup, check our smart home network guide for keeping your devices segmented.

Why it matters: Your current robot vacuum is safe to keep and use, but the long-term market is narrowing, which could mean fewer choices and higher prices when you eventually replace it.

Mass router backdoor hits 100,000+ home networks

VulnCheck disclosed ENDLESSDOORS (CVE-2026-66747), an unauthenticated root-code-execution implant embedded in the firmware of 20+ router models from Shenzhen Zhibotong Electronics, sold under brands including Zbtlink and Wiflyer. Over 100,000 devices are affected. The implant is particularly insidious — it’s enabled by default, starts at boot, runs as root, and opens no listening port. Instead, it communicates outbound to a hardcoded command-and-control server over cleartext TCP with no authentication and no encryption. Anyone who can answer at the C&C address, or intercept the traffic on the network path, gains full root control — and because it uses outbound-only communication, it works even behind NAT and firewalls, making it invisible to standard port scans VulnCheck disclosure. 9to5Mac’s coverage highlights the scale and stealth of the attack 9to5Mac coverage. If this story has you rethinking your network, our guide to Home Assistant covers secure LAN setup for local-first hubs.

Why it matters: Check your router brand and model today — if it’s a Zbtlink or Wiflyer, replace it immediately. This is the most actionable security threat in this roundup.

Google Assistant shuts down Sept 4 — here’s what changes

Google confirmed that the shutdown of Google Assistant begins on September 4, 2026, with a gradual rollout over the following weeks. Phase 1 starts with Android phones and tablets, Wear OS devices, Android Auto, and Assistant-enabled earbuds and headphones, all of which will be replaced by Gemini. Phase 2 will come later, targeting smart speakers, smart displays, Google TV, and other home devices — which means homeowners with those devices are not immediately affected but should begin planning for the transition. The immediate impact hits mobile and Auto users, while home device owners have a reprieve. Still, this represents a wake-up call for Google-dependent smart homes and is a concrete example of why local-first, vendor-independent setups matter Engadget. The Ambient provides additional detail on the timeline and scope The Ambient.

Why it matters: Don’t panic if you use Google Assistant on smart displays — you have time. But start planning now for when Phase 2 eventually arrives.

EU Cyber Resilience Act enforcement starts Sept 11

From September 11, 2026, manufacturers of connected devices sold in the EU must report actively exploited vulnerabilities within 24 hours and provide security updates for the entire product lifetime — a minimum of five years. This effectively makes disposable “no-update” gadgets unsellable in Europe, as companies can no longer abandon devices after launch. The regulation may push up device prices or encourage subscription-based update models, but it’s largely good news for homeowners who have grown tired of “abandonware” IoT products. Since manufacturers often apply EU compliance standards globally, U.S. homeowners may benefit from the longer support lifecycles even outside Europe WeSpeakIoT. The EU Digital Strategy page outlines the official requirements EU Digital Strategy.

Why it matters: Longer device support lifecycles mean your smart home investments will keep working and receiving security updates for years, not months.

Ubiquiti’s $199 SuperLink Gateway brings pro Thread to UniFi

Ubiquiti announced the SuperLink Gateway HA, a dedicated Thread border router for the UniFi ecosystem, priced at $199 with a Q3 2026 release window. The device features a 2.4GHz Thread radio supporting up to 128 clients with approximately 100 meters of range, alongside the existing sub-GHz SuperLink radio that handles up to 96 clients across roughly 2 kilometers. It also includes external antenna connectors and is FCC certified. As a U.S.-based company, Ubiquiti gains a regulatory advantage under the new FCC covered-list policy that restricts foreign-made devices. The current gap is that no Matter controller or bridge functionality has been announced yet, but the device offers professional-grade Thread topology visibility that most consumer hubs lack Matter Alpha. The Ubiquiti Store lists the product details Ubiquiti Store. When discussing Thread’s role in the broader ecosystem, Zigbee vs Z-Wave vs Matter explains how these protocols fit together.

Why it matters: Thread is becoming the wireless backbone for local-first smart homes, and this makes professional-grade Thread accessible to UniFi users.

Android must open up to rival assistants — a win for Home Assistant

On July 16, 2026, the European Commission issued a DMA decision requiring Alphabet to open 11 Android features to all assistants on equal terms, free of charge. The ruling covers always-on wake word detection via DSP access, ambient sensor access, screen automation, long-press assistant gesture, app integration with Gmail, Calendar, and Maps, on-device AI models, and fair background execution. Home Assistant has already demonstrated the impact: its “Okay Nabu” wake word using DSP access consumes roughly 1% of battery, compared to the 15% drain from CPU-based microWakeWord approaches. The decision does not require making Home Assistant the default assistant, but it does mandate concurrent hotword detection. The timeline gives Android 18 by August 1, 2027, with full concurrent hotword support arriving in Android 19 by August 1, 2028 Open Home Foundation blog. The EU DMA interoperability specification provides the official details EU DMA interoperability spec.

Why it matters: Real choice is coming to Android for smart home voice control, and open-source projects like Home Assistant are the first to benefit.

Eve launches Matter thermostat for European heating systems

Eve has launched the EU version of its Matter wall thermostat, targeting European hydronic underfloor heating systems. The device operates over Matter and Thread, requiring no vendor cloud or account — a true local-first approach. It works with Apple Home, Google Home, Home Assistant, and SmartThings, though it does need a Thread border router to function. This is exactly the kind of device the smart home audience wants: Matter-compatible, no cloud dependency, and built for interoperability Matter-SmartHome. The Eve Home product page confirms the specifications Eve Home product page.

Why it matters: A practical, local-first, Matter-native device that works across ecosystems — exactly what the open smart home movement delivers.

What we’d buy this week

Eve Matter Wall Thermostat (EU) — This is the best example of local-first, Matter-native hardware with no cloud dependency hitting the market right now. If you heat with hydronic underfloor zones, this is a no-brainer upgrade that aligns with the future of open smart home standards.

Ubiquiti SuperLink Gateway HA — For anyone already in the UniFi ecosystem, this is the most credible Thread border router announcement this quarter. At $199 with a Q3 2026 ship window, it’s competitively priced for a dedicated Thread radio with external antennas and professional-grade topology visibility.

Check (and possibly replace) your router — This isn’t a product recommendation but an action item. After the ENDLESSDOORS disclosure, homeowners with routers from unfamiliar or rebranded manufacturers should audit their hardware today. If it’s a Zbtlink or Wiflyer model, replace it now.

A week defined by policy, not products — with real consequences for what you can buy next and how you run your home.

📖 Related Reads

• ToolBrain — tool reviews, LLM comparisons, and AI workflow guides

Cross-links automatically generated from SmartHome Field Guide.

← Back to guides