Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-55726

Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gardyn Gardyn Home Firmware

Default version status: unaffected

  • 0 to < master.627affected

Gardyn Gardyn Studio Firmware

Default version status: unaffected

  • 0 to < master.627affected

Gardyn Gardyn Cloud API

Default version status: unaffected

  • 0 to < 2.12.2026affected

References