CVE-2026-28519 | Tuya arduino-TuyaOpen up to 1.2.0 DnsServer heap-based overflow

March 15, 2026 Yanac

A vulnerability classified as critical has been found in Tuya arduino-TuyaOpen up to 1.2.0. This affects an unknown part of the component DnsServer. This manipulation causes heap-based buffer overflow.

This vulnerability appears as CVE-2026-28519. The attacker needs to be present on the local network. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More