Skip to content
OpenAdvisories

Product · Gardyn

Gardyn Cloud API

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-13768 Public exploit

    Gardyn IoT Hub Use of Hard-coded Credentials

    Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke an IoTHub Registry Manager function which returns connection information for all Gardyn Home Kit and Studio devices. Access to this key also allows a …