CVE-2026-28522 | Tuya arduino-TuyaOpen up to 1.2.0 WiFiUDP null pointer dereference

A vulnerability has been found in Tuya arduino-TuyaOpen up to 1.2.0 and classified as problematic. The affected element is an unknown function of the component WiFiUDP. The manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2026-28522. The attack can only be initiated within the local network. No exploit exists.

The affected component should be upgraded.