Mygardyn
Vulnerability activity for Mygardyn: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 5.3MediumApr 3, 2026Mygardyn cloud apiCVE-2026-32662Development and test API endpoints are present that mirror production functionality.
- 7.5HighApr 3, 2026Mygardyn cloud api Auth bypass / access controlCVE-2026-32646A specific administrative endpoint is accessible without proper authentication, exposing device management functions.
- 5.3MediumApr 3, 2026Mygardyn cloud api Auth bypass / access controlCVE-2026-28767A specific administrative endpoint notifications is accessible without proper authentication.
- 9.3CriticalApr 3, 2026Mygardyn cloud api Auth bypass / access controlCVE-2026-28766A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.
- 9.1CriticalApr 3, 2026Mygardyn cloud api Auth bypass / access controlCVE-2026-25197A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.
Top products
- cloud api5 CVEs in the last year, 2 critical
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.