Skip to content
OpenAdvisories

Product · Gardyn

Home Kit Cloud API

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-1242 Public exploit

    Administrative Credentials Can Be Extracted Through Gardyn API Responses

    The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub…

    Gardyn Home Kit Mobile Application Home Kit Home Kit Cloud API