Skip to content

CVE record · 1 source

CVE-2026-119755

CVSS 7.5

Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass…

Vendor: Arendst
Product: Tasmota
CVSS v3.1: 7.5 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-352
Exposure class: OT / ICS

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

35

CVE NVD 1h ago

Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass…

Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess() by crafting a…

CVSS 7.5 Fix available CVE-2026-119755 Arendst