GA
Vendor
Gardyn
22
CVEs
0
On KEV
0
New 30D
Products
CA8.6
Cloud API
Gardyn
6 CVEs0 on KEV0 new
GC10.0
Gardyn Cloud API
Gardyn
3 CVEs0 on KEV0 new
GH10.0
Gardyn Home Firmware
Gardyn
3 CVEs0 on KEV0 new
GS10.0
Gardyn Studio Firmware
Gardyn
3 CVEs0 on KEV0 new
HK9.8
Home Kit Firmware
Gardyn
3 CVEs0 on KEV0 new
HK9.1
Home Kit
Gardyn
1 CVEs0 on KEV0 new
HK9.1
Home Kit Cloud API
Gardyn
1 CVEs0 on KEV0 new
HK9.1
Home Kit Mobile Application
Gardyn
1 CVEs0 on KEV0 new
MA8.6
Mobile Application
Gardyn
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54477 | GH Gardyn Home Firmware Gardyn | 5.4 | Jul 2 | Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax |
| CVE-2026-55726 | GC Gardyn Cloud API Gardyn | 5.3 | Jul 2 | Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere |
| CVE-2026-13768 | GH Gardyn Home Firmware Gardyn | 10.0 | Jul 2 | Gardyn IoT Hub Use of Hard-coded Credentials |
| CVE-2025-10681 | CA Cloud API Gardyn | 8.6 | Apr 3 | Gardyn Mobile Application and Device Firmware Use Hard-coded Credentials |
| CVE-2026-25197 | CA Cloud API Gardyn | 8.1 | Apr 3 | Gardyn Cloud API Authorization Bypass Through User-Controlled Key |
| CVE-2026-28766 | CA Cloud API Gardyn | 7.5 | Apr 3 | Gardyn Cloud API Missing Authentication for Critical Function |
| CVE-2026-28767 | CA Cloud API Gardyn | 5.3 | Apr 3 | Gardyn Cloud API Missing Authentication for Critical Function |
| CVE-2026-32646 | CA Cloud API Gardyn | 7.5 | Apr 3 | Gardyn Cloud API Missing Authentication for Critical Function |
| CVE-2026-32662 | CA Cloud API Gardyn | 5.3 | Apr 3 | Gardyn Cloud API Active Debug Code |
| CVE-2025-1242 | HK Home Kit Cloud API Gardyn | 9.1 | Feb 25 | Administrative Credentials Can Be Extracted Through Gardyn API Responses |
| CVE-2025-29628 | HK Home Kit Firmware Gardyn | 9.4 | Jul 25 | A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0,… |
| CVE-2025-29631 | HK Home Kit Firmware Gardyn | 9.8 | Jul 25 | Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 allow command injection through vulnerable methods… |
| CVE-2025-29629 | HK Home Kit Firmware Gardyn | 9.1 | Jul 25 | Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 use weak default credentials for secure shell access |