Mygardyn Cloud Api vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Mygardyn Cloud Api: 5 record(s), with affected versions and fixes.cpe:2.3:a:mygardyn:cloud_api
CVE-2026-32662
Medium · 5.3
CWE-489 Apr 3, 2026
Gardyn Cloud API Active Debug Code
Development and test API endpoints are present that mirror production functionality.
CVE-2026-32646
High · 7.5
CWE-306 Apr 3, 2026
Gardyn Cloud API Missing Authentication for Critical Function
A specific administrative endpoint is accessible without proper authentication, exposing device management functions.
CVE-2026-28767
Medium · 5.3
CWE-306 Apr 3, 2026
Gardyn Cloud API Missing Authentication for Critical Function
A specific administrative endpoint notifications is accessible without proper authentication.
CVE-2026-28766
High · 7.5
CWE-306 Apr 3, 2026
Gardyn Cloud API Missing Authentication for Critical Function
A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.
CVE-2026-25197
High · 8.1
CWE-639 Apr 3, 2026
Gardyn Cloud API Authorization Bypass Through User-Controlled Key
A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.