Skip to content
Threat Feed
Subscribe

Vendor

Tasmota

1 brief RSS
critical advisory

Tasmota: Heap out-of-bounds write in SendReceiveDeviceGroupMessage (CVE-2026-119756)

Tasmota versions through 16.0.0 contain a heap out-of-bounds write vulnerability in the SendReceiveDeviceGroupMessage() function that allows unauthenticated local network attackers to trigger memory corruption via crafted UDP packets.

Tasmota
1c