Vulnerabilidades de Mygardyn
CVEs publicadas que afetam produtos de Mygardyn: 5 registro(s), com severidade, exploração e correções.
CVE-2026-32662
Média · 5.3
CWE-489 03/04/2026
Gardyn Cloud API Active Debug Code
Development and test API endpoints are present that mirror production functionality.
CVE-2026-32646
Alta · 7.5
CWE-306 03/04/2026
Gardyn Cloud API Missing Authentication for Critical Function
A specific administrative endpoint is accessible without proper authentication, exposing device management functions.
CVE-2026-28767
Média · 5.3
CWE-306 03/04/2026
Gardyn Cloud API Missing Authentication for Critical Function
A specific administrative endpoint notifications is accessible without proper authentication.
CVE-2026-28766
Alta · 7.5
CWE-306 03/04/2026
Gardyn Cloud API Missing Authentication for Critical Function
A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.
CVE-2026-25197
Alta · 8.1
CWE-639 03/04/2026
Gardyn Cloud API Authorization Bypass Through User-Controlled Key
A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.