Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-32646

Gardyn Cloud API Missing Authentication for Critical Function

A specific administrative endpoint is accessible without proper authentication, exposing device management functions.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Gardyn Mygardyn
Products
Cloud Api Cloud Api
CVE-2026-28767

Gardyn Cloud API Missing Authentication for Critical Function

A specific administrative endpoint notifications is accessible without proper authentication.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Gardyn Mygardyn
Products
Cloud Api Cloud Api
CVE-2026-28766

Gardyn Cloud API Missing Authentication for Critical Function

A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Gardyn Mygardyn
Products
Cloud Api Cloud Api
CVE-2026-25197

Gardyn Cloud API Authorization Bypass Through User-Controlled Key

A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Gardyn Mygardyn
Products
Cloud Api Cloud Api
CVE-2025-10681

Gardyn Mobile Application and Device Firmware Use Hard-coded Credentials

Storage credentials are hardcoded in the mobile app and device firmware. These credentials do not adequately limit end user permissions and do not expire within a reasonable amount of time. This vulnerability may grant unauthorized access to production storage containers.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Gardyn
Products
Cloud Api Mobile Application