Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component. An attacker who hijacks or controls the Tuya cloud service can issue malicious DP event data to victim devices, causing out-of-bounds memory access that may result in information disclosure or a denial-of-service condition.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE Alert: CVE-2026-28521 - Tuya - arduino-TuyaOpen - https://www.redpacketsecurity.com/cve-alert-cve-2026-28521-tuya-arduino-tuyaopen/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-28521 #tuya #arduino-tuyaopen
Post summary
The post announces CVE-2026-28521 for Tuya’s arduino-TuyaOpen, linking to an external alert page, but contains no technical exploit, patch, or exploitation claims.
CVE-2026-28521 arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component. An attacker who hijacks or controls the Tuya cloud… https://www.cve.org/CVERecord?id=CVE-2026-28521
Post summary
A new CVE (CVE‑2026‑28521) is disclosed, detailing an out‑of‑bounds memory read in the TuyaIoT component of arduino‑TuyaOpen v1.2.1‑, with no PoC, exploit code, active exploitation, or patch provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tuya | arduino-tuyaopen | - | - | - |