Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-32646

Gardyn Cloud API Missing Authentication for Critical Function

A specific administrative endpoint is accessible without proper authentication, exposing device management functions.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Gardyn Mygardyn
Products
Cloud Api Cloud Api
CVE-2026-28767

Gardyn Cloud API Missing Authentication for Critical Function

A specific administrative endpoint notifications is accessible without proper authentication.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Gardyn Mygardyn
Products
Cloud Api Cloud Api
CVE-2026-28766

Gardyn Cloud API Missing Authentication for Critical Function

A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Gardyn Mygardyn
Products
Cloud Api Cloud Api
CVE-2026-25197

Gardyn Cloud API Authorization Bypass Through User-Controlled Key

A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Gardyn Mygardyn
Products
Cloud Api Cloud Api