Tuya

Products

ProductCVEsExploitedLatest
arduino-TuyaOpen4–Mar 15, 2026
SDK2–Mar 3, 2026
App1–Mar 3, 2026

Exploited and recent CVEs

  • CVE-2026-28522 Medium 6.5 arduino-TuyaOpen WiFiUDP Null Pointer Dereference Denial of Service 0.3%
  • CVE-2026-28519 High 8.8 arduino-TuyaOpen DnsServer Heap-Based Buffer Overflow Remote Code Execution 0.4%
  • CVE-2026-28521 High 7.7 arduino-TuyaOpen TuyaIoT Out-of-Bounds Memory Read Information Disclosure 0.2%
  • CVE-2026-28520 High 8.4 arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code Execution 0.2%
  • CVE-2026-3465 Low 3.1 Tuya App/SDK JSON Data Point denial of service 0.3%
  • CVE-2026-3465 Low 3.1 Tuya App/SDK JSON Data Point denial of service 0.3%
  • CVE-2024-3764 Low 2.7 Tuya SDK MQTT Packet denial of service 0.6%