Tuya

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Tuya records in CISA KEV

No Tuya vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Arduino-tuyaopen · all components

TI-2026-22781 CVE-2026-28519 · GHSA-8gpj-j2h5-7993

MEDIUM 40

arduino-TuyaOpen before version 1.2.1 contains a heap-based buffer overflow vulnerability in the DnsServer component.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00393 Published 2026-03-15 Fixed in 1.2.1 CWE-122

TI-2026-22782 CVE-2026-28520 · GHSA-3w55-cqrx-x67w

LOW 39

arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00201 Published 2026-03-15 Fixed in 1.2.1 CWE-193

TI-2026-22784 CVE-2026-28522 · GHSA-5f8w-qvc2-2v3p

LOW 31

arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00269 Published 2026-03-15 Fixed in 1.2.1 CWE-476

TI-2026-22783 CVE-2026-28521 · GHSA-r4wm-392x-hfg5

LOW 30

arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component.

CVSS 4.0HIGH 7.0 Local No auth No interaction EPSS 0.00225 Published 2026-03-15 Fixed in 1.2.1 CWE-125