GCVE - cpe:2.3:a:gardyn:cloud_api:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gardyn:cloud_api:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Gardyn (`00fc7b21-940a-5c8b-ab87-23b1d44cfff2`)
Product	Cloud Api (`0bad9657-7997-51f4-a3e2-b00cc8a94a55`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-32662`	vulnerable	2026-06-08 07:57:17.908265	Gardyn Cloud API Active Debug Code MEDIUM (5.3) Development and test API endpoints are present that mirror production functionality. Published: 2026-04-03T20:11:56.176Z Updated: 2026-04-06T14:51:59.384Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-03 https://mygardyn.com/security/ https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-055-03.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-32646`	vulnerable	2026-06-08 07:57:17.867907	Gardyn Cloud API Missing Authentication for Critical Function HIGH (7.5) A specific administrative endpoint is accessible without proper authentication, exposing device management functions. Published: 2026-04-03T20:15:45.736Z Updated: 2026-04-07T14:24:15.629Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-03 https://mygardyn.com/security/ https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-055-03.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28767`	vulnerable	2026-06-08 07:55:15.631901	Gardyn Cloud API Missing Authentication for Critical Function MEDIUM (5.3) A specific administrative endpoint notifications is accessible without proper authentication. Published: 2026-04-03T20:18:05.470Z Updated: 2026-04-07T14:23:23.456Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-03 https://mygardyn.com/security/ https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-055-03.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28766`	vulnerable	2026-06-08 07:55:15.630641	Gardyn Cloud API Missing Authentication for Critical Function CRITICAL (9.3) A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication. Published: 2026-04-03T20:20:57.302Z Updated: 2026-04-07T14:22:53.379Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-03 https://mygardyn.com/security/ https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-055-03.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-25197`	vulnerable	2026-06-08 07:53:19.490216	Gardyn Cloud API Authorization Bypass Through User-Controlled Key CRITICAL (9.1) A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call. Published: 2026-04-03T20:23:20.083Z Updated: 2026-04-07T14:20:31.044Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-03 https://mygardyn.com/security/ https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-055-03.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10681`	vulnerable	2026-06-08 07:02:27.310515	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.