TI-2026-39330 CVE-2026-54477 · GHSA-9qxq-9wpj-4f86
Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax
Priority LOW 23
The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks.
Vulnerabilities
3 records
Release: Gardyn Cloud API, Gardyn Home Firmware, Gardyn Studio Firmware 2.12.2026, master.627 Clear all filters
TI-2026-40224 CVE-2026-55726 · GHSA-pfg9-vjvh-f5rw
Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere
Priority LOW 37
The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication.
TI-2026-11608 CVE-2026-13768 · GHSA-22gx-ghv9-47gj
Gardyn IoT Hub Use of Hard-coded Credentials
Priority MEDIUM 50
Gardyn devices expose a privileged iothubowner key.