Vendors / Tuya Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 5 CVSS 7.0–8.9
Exploited now Tuya records in CISA KEV No Tuya vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00312 · Published 2025-09-16 · No fix listed CWE-250
Priority LOW 39
Cross-Site Request Forgery (CSRF) vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects the Tuya Smart and Smartlife mobile applications, as well as other third-party applications t…
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00183 · Published 2025-11-24 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
Critical1 High5 Medium0 Low2 No CVSS0