Mygardyn vulnerabilities
Published CVEs affecting Mygardyn products: 5 record(s), with severity, exploitation and fixes.
CVE-2026-32662
Medium · 5.3
CWE-489 Apr 3, 2026
Gardyn Cloud API Active Debug Code
Development and test API endpoints are present that mirror production functionality.
CVE-2026-32646
High · 7.5
CWE-306 Apr 3, 2026
Gardyn Cloud API Missing Authentication for Critical Function
A specific administrative endpoint is accessible without proper authentication, exposing device management functions.
CVE-2026-28767
Medium · 5.3
CWE-306 Apr 3, 2026
Gardyn Cloud API Missing Authentication for Critical Function
A specific administrative endpoint notifications is accessible without proper authentication.
CVE-2026-28766
High · 7.5
CWE-306 Apr 3, 2026
Gardyn Cloud API Missing Authentication for Critical Function
A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.
CVE-2026-25197
High · 8.1
CWE-639 Apr 3, 2026
Gardyn Cloud API Authorization Bypass Through User-Controlled Key
A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.