CVE-2026-32662
Published Apr 3, 2026Development and test API endpoints are present that mirror production functionality.
- evidence mentions
- 3
- Buzz score
- 28.9
Vendor/product archive
mygardyn / cloud_api CVEs
Beta · best-effort5 CVEs tagged to mygardyn / cloud_api — 2 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2026-32646
Published Apr 3, 2026A specific administrative endpoint is accessible without proper authentication, exposing device management functions.
- evidence mentions
- 3
- Buzz score
- 28.9
CVE-2026-28767
Published Apr 3, 2026A specific administrative endpoint notifications is accessible without proper authentication.
- evidence mentions
- 3
- Buzz score
- 28.9
CVE-2026-28766
Published Apr 3, 2026A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.
- evidence mentions
- 3
- Buzz score
- 28.9
CVE-2026-25197
Published Apr 3, 2026A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.
- evidence mentions
- 3
- Buzz score
- 28.9
Showing 1-5 of 5 CVEsPage 1 of 1