Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-38426
7.3
HIGHCVSS v3
Published
May 27, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv_10_scripter.ino, fetch_jpg(), jpg_task.boundary[40], strcpy() function.
arendst/Tasmota
GitHubAlternative firmware for ESP8266 and ESP32 based devices with easy configuration using webUI, OTA updates, automation using timers or rules, expandability and entirely local control over MQTT, HTTP, Serial or KNX. Full documentation at
GitHubAlternative firmware for ESP8266 and ESP32 based devices with easy configuration using webUI, OTA updates, automation using timers or rules, expandability and entirely local control over MQTT, HTTP, Serial or KNX. Full documentation atNVD