CVE-2026-28519

The CVE-2026-28519 advisory concerns arduino-TuyaOpen prior to 1.2.1, where the DnsServer component is vulnerable to a heap-based overflow. An attacker on the same LAN who controls the local DNS server can send crafted DNS responses to overflow the heap buffer on affected embedded devices, potent...