Skip to content
Noroxi

Tuya records

7 published records for vendor tuya.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
71.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 24
  2. 25
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

7 records
  • CVE-2025-56557
    36Monitor

    An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol.

    CriticalCVSS 9.1No exploitEPSS 0%

    tuya · tuyaSep 16, 2025

  • CVE-2025-56400
    35Monitor

    Cross-Site Request Forgery (CSRF) vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects the Tuya Smar

    HighCVSS 8.8No exploitEPSS 0%

    tuya · smartlifeNov 24, 2025

  • CVE-2026-28519
    34Monitor

    arduino-TuyaOpen DnsServer Heap-Based Buffer Overflow Remote Code Execution

    HighCVSS 8.7No exploitEPSS 0%

    tuya · arduino-tuyaopenMar 16, 2026

  • CVE-2026-28520
    34Monitor

    arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code Execution

    HighCVSS 8.6No exploitEPSS 0%

    tuya · arduino-tuyaopenMar 16, 2026

  • CVE-2026-28522
    28Monitor

    arduino-TuyaOpen WiFiUDP Null Pointer Dereference Denial of Service

    HighCVSS 7.1No exploitEPSS 0%

    tuya · arduino-tuyaopenMar 16, 2026

  • CVE-2026-28521
    28Monitor

    arduino-TuyaOpen TuyaIoT Out-of-Bounds Memory Read Information Disclosure

    HighCVSS 7.0No exploitEPSS 0%

    tuya · arduino-tuyaopenMar 16, 2026

  • CVE-2024-3764
    10Monitor

    Tuya SDK MQTT Packet denial of service

    LowCVSS 2.7No exploitEPSS 0%

    tuya · sdkApr 14, 2024