Arendst Tasmota
2 CVEs affecting Arendst Tasmota. Latest disclosed: 2026-11-09. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-119756 | Critical | 9.8 | 2026-11-09 | Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage() that allows unauthenticat… |
CVE-2026-119755 | High | 7.5 | 2026-11-09 | Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-ba… |