Skip to content
OpenAdvisories

Product · Gardyn

Cloud API

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.6
    CVE-2025-10681 Public exploit

    Gardyn Mobile Application and Device Firmware Use Hard-coded Credentials

    Storage credentials are hardcoded in the mobile app and device firmware. These credentials do not adequately limit end user permissions and do not expire within a reasonable amount of time. This vulnerability may grant unauthorized access to production storag…

    Gardyn Cloud API Mobile Application
  • Critical 9.1
    CVE-2026-25197 Public exploit

    Gardyn Cloud API Authorization Bypass Through User-Controlled Key

    A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.

    Gardyn Cloud API
  • Critical 9.3
    CVE-2026-28766 Public exploit

    Gardyn Cloud API Missing Authentication for Critical Function

    A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.

    Gardyn Cloud API
  • Medium 5.3
    CVE-2026-28767 Public exploit

    Gardyn Cloud API Missing Authentication for Critical Function

    A specific administrative endpoint notifications is accessible without proper authentication.

    Gardyn Cloud API
  • High 7.5
    CVE-2026-32646 Public exploit

    Gardyn Cloud API Missing Authentication for Critical Function

    A specific administrative endpoint is accessible without proper authentication, exposing device management functions.

    Gardyn Cloud API
  • Medium 5.3
    CVE-2026-32662 Public exploit

    Gardyn Cloud API Active Debug Code

    Development and test API endpoints are present that mirror production functionality.

    Gardyn Cloud API