Gardyn vulnerabilities

Products

• Cloud Api 6
• Cloud Api 3
• Home Firmware 3
• Studio Firmware 3
• Home Kit Firmware 3
• Mobile Application 3

Newest

• gardyn cloud api, home firmware, studio firmware +2 more Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2026-54477 Public exploit 5.1 MediumJuly 2, 2026
• gardyn cloud api, home firmware, studio firmware +2 more Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere CVE-2026-55726 Public exploit 6.9 MediumJuly 2, 2026
• gardyn cloud api, home firmware, studio firmware +2 more Gardyn IoT Hub Use of Hard-coded Credentials CVE-2026-13768 Public exploit 9.5 CriticalJuly 2, 2026
• gardyn mobile application OTP Bypass in TEİAŞ's Mobile Application CVE-2026-1816 6.3 MediumMay 21, 2026
• gardyn mobile application Session Hijacking in TEİAŞ's Mobile Application CVE-2026-1815 5.7 MediumMay 21, 2026
• gardyn mobile application, cloud api +1 more Gardyn Mobile Application and Device Firmware Use Hard-coded Credentials CVE-2025-10681 Public exploit 8.8 HighApril 3, 2026
• gardyn cloud api Gardyn Cloud API Authorization Bypass Through User-Controlled Key CVE-2026-25197 Public exploit 9.3 CriticalApril 3, 2026
• gardyn cloud api Gardyn Cloud API Missing Authentication for Critical Function CVE-2026-28766 Public exploit 9.2 CriticalApril 3, 2026
• gardyn cloud api Gardyn Cloud API Missing Authentication for Critical Function CVE-2026-28767 Public exploit 6.9 MediumApril 3, 2026
• gardyn cloud api Gardyn Cloud API Missing Authentication for Critical Function CVE-2026-32646 Public exploit 8.7 HighApril 3, 2026
• gardyn cloud api Gardyn Cloud API Active Debug Code CVE-2026-32662 Public exploit 6.9 MediumApril 3, 2026
• gardyn home kit, home kit cloud api, home kit mobile application +2 more Administrative Credentials Can Be Extracted Through Gardyn API Responses CVE-2025-1242 Public exploit 9.3 CriticalFebruary 25, 2026
• gardyn home kit firmware An issue in Gardyn 4 allows a remote attacker execute arbitrary code CVE-2025-29631 9.8 CriticalJuly 25, 2025
• gardyn home kit firmware An issue in Gardyn 4 allows a remote attacker to obtain sensitive information and execute... CVE-2025-29629 9.1 CriticalJuly 25, 2025
• gardyn home kit firmware An issue in Gardyn 4 allows a remote attacker to obtain sensitive information and execute... CVE-2025-29628 Public exploit 9.4 CriticalJuly 25, 2025