Arendst vulnerabilities
We track 2 vulnerabilities in Arendst products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Arendst vulnerabilities
- 9.8 Critical severity
Tasmota: Buffer Access with Incorrect Length Value
Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage() that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Device Groups messages ov
- 7.5 High severity
Tasmota: Cross-Site Request Forgery
Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess() by crafting a Referer header where the device hos