{"schema_version":1,"title":"Gardyn vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in Gardyn: 0 in the last 7 days and 3 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-55726, was published on 3 July 2026. 3 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/gardyn","json_url":"https://junglewise.ai/threats/vendors/gardyn.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/gardyn","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":2,"all_time":9,"critical":3,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":3,"last_365_days":9},"latest":[{"cve":"CVE-2026-55726","cvss":5.3,"slug":"cve-2026-55726-gardyn-iot-hub-sensitive-information-exposure-in-azure-blob","title":"Gardyn IoT Hub sensitive information exposure in Azure Blob Storage logs","severity":"medium","exploited":false,"published_at":"2026-07-03T00:16:52.607+00:00","url":"https://junglewise.ai/threats/cve-2026-55726-gardyn-iot-hub-sensitive-information-exposure-in-azure-blob"},{"cve":"CVE-2026-54477","cvss":5.4,"slug":"cve-2026-54477-gardyn-iot-hub-missing-security-headers-in-admin-panel","title":"Gardyn IoT Hub missing security headers in admin panel","severity":"medium","exploited":false,"published_at":"2026-07-03T00:16:52.44+00:00","url":"https://junglewise.ai/threats/cve-2026-54477-gardyn-iot-hub-missing-security-headers-in-admin-panel"},{"cve":"CVE-2026-13768","cvss":10,"slug":"cve-2026-13768-gardyn-iot-hub-hard-coded-privileged-key-exposure","title":"Gardyn IoT Hub hard-coded privileged key exposure","severity":"critical","exploited":false,"published_at":"2026-07-03T00:16:52.27+00:00","url":"https://junglewise.ai/threats/cve-2026-13768-gardyn-iot-hub-hard-coded-privileged-key-exposure"},{"cve":"CVE-2026-32662","cvss":5.3,"epss":0.0032,"slug":"cve-2026-32662-gardyn-cloud-api-active-debug-code-in-development-endpoints","title":"Gardyn Cloud API Active Debug Code in Development Endpoints","severity":"medium","exploited":false,"published_at":"2026-04-03T21:17:11.323+00:00","url":"https://junglewise.ai/threats/cve-2026-32662-gardyn-cloud-api-active-debug-code-in-development-endpoints"},{"cve":"CVE-2026-32646","cvss":7.5,"epss":0.0049,"slug":"cve-2026-32646-gardyn-cloud-api-missing-authentication-in-administrative","title":"Gardyn Cloud API missing authentication in administrative endpoint","severity":"high","exploited":false,"published_at":"2026-04-03T21:17:11.137+00:00","url":"https://junglewise.ai/threats/cve-2026-32646-gardyn-cloud-api-missing-authentication-in-administrative"},{"cve":"CVE-2026-28767","cvss":5.3,"epss":0.0038,"slug":"cve-2026-28767-gardyn-cloud-api-missing-authentication-in-administrative","title":"Gardyn Cloud API missing authentication in administrative notification endpoint","severity":"medium","exploited":false,"published_at":"2026-04-03T21:17:10.58+00:00","url":"https://junglewise.ai/threats/cve-2026-28767-gardyn-cloud-api-missing-authentication-in-administrative"},{"cve":"CVE-2026-28766","cvss":9.3,"epss":0.0044,"slug":"cve-2026-28766-gardyn-cloud-api-missing-authentication-in-user-account-endpoint","title":"Gardyn Cloud API missing authentication in user account endpoint","severity":"critical","exploited":false,"published_at":"2026-04-03T21:17:10.387+00:00","url":"https://junglewise.ai/threats/cve-2026-28766-gardyn-cloud-api-missing-authentication-in-user-account-endpoint"},{"cve":"CVE-2026-25197","cvss":9.1,"epss":0.003,"slug":"cve-2026-25197-gardyn-cloud-api-authorization-bypass-via-id-modification","title":"Gardyn Cloud API authorization bypass via ID modification","severity":"critical","exploited":false,"published_at":"2026-04-03T21:17:09.867+00:00","url":"https://junglewise.ai/threats/cve-2026-25197-gardyn-cloud-api-authorization-bypass-via-id-modification"},{"cve":"CVE-2025-10681","cvss":8.6,"epss":0.0034,"slug":"cve-2025-10681-gardyn-home-kit-hardcoded-storage-credentials-in-mobile-app-and","title":"Gardyn Home Kit hardcoded storage credentials in mobile app and firmware","severity":"high","exploited":false,"published_at":"2026-04-03T21:17:08.63+00:00","url":"https://junglewise.ai/threats/cve-2025-10681-gardyn-home-kit-hardcoded-storage-credentials-in-mobile-app-and"}],"vendor":{"hub":true,"name":"Gardyn","slug":"gardyn","homepage":"https://mygardyn.com/","description":"Gardyn is a company that develops indoor hydroponic gardening systems and automated plant growth technology.","url":"https://junglewise.ai/threats/vendors/gardyn"},"weekly":[{"week":"2026-06-29","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-13768","cvss":10,"slug":"cve-2026-13768-gardyn-iot-hub-hard-coded-privileged-key-exposure","title":"Gardyn IoT Hub hard-coded privileged key exposure","severity":"critical","exploited":false,"published_at":"2026-07-03T00:16:52.27+00:00","url":"https://junglewise.ai/threats/cve-2026-13768-gardyn-iot-hub-hard-coded-privileged-key-exposure"},{"cve":"CVE-2026-28766","cvss":9.3,"epss":0.0044,"slug":"cve-2026-28766-gardyn-cloud-api-missing-authentication-in-user-account-endpoint","title":"Gardyn Cloud API missing authentication in user account endpoint","severity":"critical","exploited":false,"published_at":"2026-04-03T21:17:10.387+00:00","url":"https://junglewise.ai/threats/cve-2026-28766-gardyn-cloud-api-missing-authentication-in-user-account-endpoint"},{"cve":"CVE-2026-25197","cvss":9.1,"epss":0.003,"slug":"cve-2026-25197-gardyn-cloud-api-authorization-bypass-via-id-modification","title":"Gardyn Cloud API authorization bypass via ID modification","severity":"critical","exploited":false,"published_at":"2026-04-03T21:17:09.867+00:00","url":"https://junglewise.ai/threats/cve-2026-25197-gardyn-cloud-api-authorization-bypass-via-id-modification"},{"cve":"CVE-2025-10681","cvss":8.6,"epss":0.0034,"slug":"cve-2025-10681-gardyn-home-kit-hardcoded-storage-credentials-in-mobile-app-and","title":"Gardyn Home Kit hardcoded storage credentials in mobile app and firmware","severity":"high","exploited":false,"published_at":"2026-04-03T21:17:08.63+00:00","url":"https://junglewise.ai/threats/cve-2025-10681-gardyn-home-kit-hardcoded-storage-credentials-in-mobile-app-and"},{"cve":"CVE-2026-32646","cvss":7.5,"epss":0.0049,"slug":"cve-2026-32646-gardyn-cloud-api-missing-authentication-in-administrative","title":"Gardyn Cloud API missing authentication in administrative endpoint","severity":"high","exploited":false,"published_at":"2026-04-03T21:17:11.137+00:00","url":"https://junglewise.ai/threats/cve-2026-32646-gardyn-cloud-api-missing-authentication-in-administrative"},{"cve":"CVE-2026-54477","cvss":5.4,"slug":"cve-2026-54477-gardyn-iot-hub-missing-security-headers-in-admin-panel","title":"Gardyn IoT Hub missing security headers in admin panel","severity":"medium","exploited":false,"published_at":"2026-07-03T00:16:52.44+00:00","url":"https://junglewise.ai/threats/cve-2026-54477-gardyn-iot-hub-missing-security-headers-in-admin-panel"},{"cve":"CVE-2026-28767","cvss":5.3,"epss":0.0038,"slug":"cve-2026-28767-gardyn-cloud-api-missing-authentication-in-administrative","title":"Gardyn Cloud API missing authentication in administrative notification endpoint","severity":"medium","exploited":false,"published_at":"2026-04-03T21:17:10.58+00:00","url":"https://junglewise.ai/threats/cve-2026-28767-gardyn-cloud-api-missing-authentication-in-administrative"},{"cve":"CVE-2026-32662","cvss":5.3,"epss":0.0032,"slug":"cve-2026-32662-gardyn-cloud-api-active-debug-code-in-development-endpoints","title":"Gardyn Cloud API Active Debug Code in Development Endpoints","severity":"medium","exploited":false,"published_at":"2026-04-03T21:17:11.323+00:00","url":"https://junglewise.ai/threats/cve-2026-32662-gardyn-cloud-api-active-debug-code-in-development-endpoints"},{"cve":"CVE-2026-55726","cvss":5.3,"slug":"cve-2026-55726-gardyn-iot-hub-sensitive-information-exposure-in-azure-blob","title":"Gardyn IoT Hub sensitive information exposure in Azure Blob Storage logs","severity":"medium","exploited":false,"published_at":"2026-07-03T00:16:52.607+00:00","url":"https://junglewise.ai/threats/cve-2026-55726-gardyn-iot-hub-sensitive-information-exposure-in-azure-blob"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Gardyn Cloud API","slug":"cloud-api","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/cloud-api"},{"name":"Gardyn Home Firmware","slug":"home-firmware","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/home-firmware"},{"name":"Gardyn Studio Firmware","slug":"studio-firmware","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/studio-firmware"}]}