Skip to content

CyberSIXT Search

Gardyn product

Home Firmware

← All Gardyn products

No Home Firmware CVE is in the CISA KEV catalogue.

Tracked since 2 Jul · latest article Fri 10 Jul · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 all time
High exploit odds · current: 0; high · not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

No Home Firmware CVE is in the CISA KEV catalogue.

Coverage

2 articles · all timeFull timeline →

Two articles so far, 2 Jul to 10 Jul.

Thu 2 Jul · first reportGardyn IoT Hub bugs expose smart gardens to remote hijackCISA
Fri 10 JulCritical flaw in Gardyn IoT Hub lets attackers run code remotelySecurityOnline

See the full timeline

10 JulCritical flaw in Gardyn IoT Hub lets attackers run code remotelySecurityOnline
2 JulGardyn IoT Hub bugs expose smart gardens to remote hijackCISA · official notice

All CVEs in coverage

3

CVE-2026-13768Gardyn IoT Hub Use of Hard-coded CredentialsCVSS10.0Critical–Not in KEV0.7%EPSS2articles

CVE-2026-55726Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control SphereCVSS6.9Medium–Not in KEV0.5%EPSS1article

CVE-2026-54477Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting SyntaxCVSS5.4Medium–Not in KEV0.3%EPSS1article

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.