Skip to content
Threat Feed

Vendor

Arendst

1 brief RSS
critical advisory

Arendst Tasmota CVE-2026-38422 Remote Code Execution

A public exploit is available for CVE-2026-38422, a critical remote code execution vulnerability in Arendst Tasmota affecting devices running version <= 15.3.0.3 with scripter support enabled via combined buffer overflows in the `fetch_jpg()` function.

Tasmota cve-2026-38422 rce denial-of-service
2r 2t