Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-13768

Gardyn IoT Hub Use of Hard-coded Credentials

Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke an IoTHub Registry Manager function which returns connection information for all Gardyn Home Kit and Studio devices. Access to this key also allows a malicious user to execute arbitrary commands on a specific connected device and may allow the malicious user to pivot to other devices on the user's network.

CVSS 4.0 · 9.5 Critical EPSS < 1% KEV · Not listed
Vendors
Gardyn
Products
Gardyn Cloud Api Gardyn Home Firmware Gardyn Studio Firmware
CVE-2026-55726

Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere

The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Gardyn
Products
Gardyn Cloud Api Gardyn Home Firmware Gardyn Studio Firmware