Tuya vulnerabilities
6 published CVEs name Tuya among the affected products.
- 6Published CVEs6 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-28522
arduino-TuyaOpen WiFiUDP Null Pointer Dereference Denial of Service
Tuya · arduino-TuyaOpen
High7.1 - CVE-2026-28519
arduino-TuyaOpen DnsServer Heap-Based Buffer Overflow Remote Code Execution
Tuya · arduino-TuyaOpen
High8.7 - CVE-2026-28521
arduino-TuyaOpen TuyaIoT Out-of-Bounds Memory Read Information Disclosure
Tuya · arduino-TuyaOpen
High7.0 - CVE-2026-28520
arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code Execution
Tuya · arduino-TuyaOpen
High8.6 - CVE-2026-3465
Tuya App/SDK JSON Data Point denial of service
Tuya · App
Low2.3 - CVE-2024-3764
Tuya SDK MQTT Packet denial of service
Tuya · SDK
Low2.7