Gardyn vulnerabilities

CVEs per yearBy the year they were published

1. 20253
2. 202610

Newest CVEs

• CVE-2026-54477

  Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax

  Gardyn · Gardyn Home Firmware

  Medium5.1
• CVE-2026-55726

  Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere

  Gardyn · Gardyn Home Firmware

  Medium6.9
• CVE-2026-13768

  Gardyn IoT Hub Use of Hard-coded Credentials

  Gardyn · Gardyn Home Firmware

  Critical9.5
• CVE-2025-10681

  Gardyn Mobile Application and Device Firmware Use Hard-coded Credentials

  Gardyn · Mobile Application

  High8.8
• CVE-2026-25197

  Gardyn Cloud API Authorization Bypass Through User-Controlled Key

  Gardyn · Cloud API

  Critical9.3
• CVE-2026-28766

  Gardyn Cloud API Missing Authentication for Critical Function

  Gardyn · Cloud API

  Critical9.2
• CVE-2026-28767

  Gardyn Cloud API Missing Authentication for Critical Function

  Gardyn · Cloud API

  Medium6.9
• CVE-2026-32646

  Gardyn Cloud API Missing Authentication for Critical Function

  Gardyn · Cloud API

  High8.7
• CVE-2026-32662

  Gardyn Cloud API Active Debug Code

  Gardyn · Cloud API

  Medium6.9
• CVE-2025-1242

  Administrative Credentials Can Be Extracted Through Gardyn API Responses

  Gardyn · Home Kit

  Critical9.3