Skip to content
OpenAdvisories

Product · Gardyn

Cloud API

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-25197 Public exploit

    Gardyn Cloud API Authorization Bypass Through User-Controlled Key

    A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.

    Gardyn Cloud API
  • Critical 9.3
    CVE-2026-28766 Public exploit

    Gardyn Cloud API Missing Authentication for Critical Function

    A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.

    Gardyn Cloud API