Some common IoT vulnerabilities include weak or default passwords, unsecured communication protocols, and out-dated software or firmware. Additionally, many IoT devices may have poor security practices, such as using unencrypted data storage or transmitting sensitive data without encryption.