CVE-2026-28520: tuya arduino-tuyaopen – CVSS 8.4 · Watchpost