Tuya vulnerabilities
6 published CVEs name Tuya among the affected products.
- Published CVEs
- 6
- Last 12 months
- 5
- Critical
- 0
- Known exploited
- 0
Critical 0High 4Medium 0Low 2Not scored 0
CVEs per yearBy the year they were published
- 20241
- 20265
Newest CVEs
- CVE-2026-28522
arduino-TuyaOpen WiFiUDP Null Pointer Dereference Denial of Service
Tuya · arduino-TuyaOpen
High7.1 - CVE-2026-28519
arduino-TuyaOpen DnsServer Heap-Based Buffer Overflow Remote Code Execution
Tuya · arduino-TuyaOpen
High8.7 - CVE-2026-28521
arduino-TuyaOpen TuyaIoT Out-of-Bounds Memory Read Information Disclosure
Tuya · arduino-TuyaOpen
High7.0 - CVE-2026-28520
arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code Execution
Tuya · arduino-TuyaOpen
High8.6 - CVE-2026-3465
Tuya App/SDK JSON Data Point denial of service
Tuya · App
Low2.3 - CVE-2024-3764
Tuya SDK MQTT Packet denial of service
Tuya · SDK
Low2.7