CVE-2026-28520 - Vulnerability Analysis

Overview

arduino-TuyaOpen < 1.2.1 contains a buffer overflow caused by improper handling in the WiFiMulti component, letting attackers execute arbitrary code when the device connects to a malicious AP hotspot.

Severity & Score

Impact

Attackers can execute arbitrary code on the embedded device, potentially taking full control.

Mitigation

Update to version 1.2.1 or later.

References

• https://github.com/tuya/arduino-TuyaOpen
• https://src.tuya.com/announcement/32
• https://www.vulncheck.com/advisories/arduino-tuyaopen-wifimulti-single-byte-buffer-overflow-remote-code-execution

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner