CVE-2026-28522: tuya arduino-tuyaopen – CVSS 6.5 · Watchpost