cve.bz

arendst tasmota vulnerabilities, newest first

Filter
  1. 9.3CVE-2026-119756EPSS 0.5%

    Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage() that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Devi…

  2. 7.5CVE-2026-119755EPSS 0.1%

    Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess() by crafting a Referer header…