CVE-2025-56557

9.1 criticalEPSS 0.3%

Critical (9.1) in tuya tuya. EPSS 0.3% chance of exploitation in the next 30 days.

An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol.

Severity

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-250
Published: 2025-09-16
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19