Not scored
CVE-2025-29631
Gardyn Home Kit Firmware vulnerability
GardynHome Kit Firmware
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
2.1%probability of exploitation in the next 30 days
Higher than 81% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 allow command injection through vulnerable methods that do not sanitize input before passing content to the operating system for execution. The vulnerability may allow an attacker to execute arbitrary operating system commands on a target Home Kit.
Coverage 1 article · 1 outlet
- Gardyn IoT flaws allow remote hacking via CVE-2025-29631SecurityWeek · first in our coverage