Skip to content
OpenAdvisories

Vendor

arendst

2 known vulnerabilities.

Products

Tasmota 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-119755

    Tasmota 16.0.0 CSRF via Referer Header Validation Bypass

    Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess() by crafting a Referer header where the device ho…

    arendst Tasmota