CVE-2025-56557: Tuya

Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol.

Affected products

• Tuya Tuya: version 5.6.1 only

Published 2025-09-16. Last modified 2026-07-05.