Read the docs

Tuya

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Tuya records in CISA KEV

No Tuya vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Arduino-tuyaopen 4 records MEDIUM Tuya 2 records MEDIUM Smartlife 1 record LOW Tuya Smart 1 record LOW

Records

1 record in Tuya Smart · all components

TI-2025-35327 CVE-2025-56400 · GHSA-6w4j-qm3c-h3vj

Cross-Site Request Forgery (CSRF) vulnerability in the OAuth implementation of the Tuya…

Priority LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects the Tuya Smart and Smartlife mobile applications, as well as other third-party applications t…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00183 Published 2025-11-24 No fix listed CWE-352
Open these records in search →