Filtered by vendor Mygardyn
Subscriptions
Total
5 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-32646 | 2 Gardyn, Mygardyn | 2 Cloud Api, Cloud Api | 2026-04-22 | 7.5 High |
| A specific administrative endpoint is accessible without proper authentication, exposing device management functions. | ||||
| CVE-2026-28767 | 2 Gardyn, Mygardyn | 2 Cloud Api, Cloud Api | 2026-04-22 | 5.3 Medium |
| A specific administrative endpoint notifications is accessible without proper authentication. | ||||
| CVE-2026-28766 | 2 Gardyn, Mygardyn | 2 Cloud Api, Cloud Api | 2026-04-22 | 9.3 Critical |
| A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication. | ||||
| CVE-2026-25197 | 2 Gardyn, Mygardyn | 2 Cloud Api, Cloud Api | 2026-04-22 | 9.1 Critical |
| A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call. | ||||
| CVE-2026-32662 | 2 Gardyn, Mygardyn | 2 Cloud Api, Cloud Api | 2026-04-22 | 5.3 Medium |
| Development and test API endpoints are present that mirror production functionality. | ||||
Page 1 of 1.