Arendst

2 CVEs in 1 Arendst product, including Tasmota. Newest: CVE-2026-119756 (2026-11-09). Severity, EPSS and public exploits for each.

Arendst products with known CVEs

ProductCVEs
Tasmota2
Arendst CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-119756Critical9.82026-11-09Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage() that allows unauthenticat…
CVE-2026-119755High7.52026-11-09Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-ba…