CVE-2026-28521: tuya arduino-tuyaopen – CVSS 7.7 · Watchpost