Skip to content
OpenAdvisories

Vendor

Gardyn

13 known vulnerabilities.

Products

Cloud API 6 Gardyn Home Firmware 3 Gardyn Studio Firmware 3 Gardyn Cloud API 3 Home Kit Firmware 3 Mobile Application 1 Home Kit 1 Home Kit Mobile Application 1 Home Kit Cloud API 1 Home Firmware 0 Studio Firmware 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-54477 Public exploit

    Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax

    The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks.

    Gardyn Gardyn Studio Firmware Gardyn Home Firmware Gardyn Cloud API
  • Medium 5.3
    CVE-2026-55726 Public exploit

    Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere

    The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.

    Gardyn Gardyn Home Firmware Gardyn Cloud API Gardyn Studio Firmware
  • Medium 5.3
    CVE-2026-28767 Public exploit

    Gardyn Cloud API Missing Authentication for Critical Function

    A specific administrative endpoint notifications is accessible without proper authentication.

    Gardyn Cloud API
  • Medium 5.3
    CVE-2026-32662 Public exploit

    Gardyn Cloud API Active Debug Code

    Development and test API endpoints are present that mirror production functionality.

    Gardyn Cloud API