CyberSIXT Search
Vendor

Gardyn

No Gardyn CVE is in the CISA KEV catalogue.

Tracked since 27 Feb · latest article Fri 10 Jul · RSS

No product called by that name is recorded for this vendor.

High exploit odds · current
0
high · not in KEV

Exploited, by due date

CSV download

No Gardyn CVE is in the CISA KEV catalogue.

Products

2 products · 6 CVEs in coverage
Home Firmware3 CVEs · 0 in KEVlatest 10 JulHome Kit Firmware3 CVEs · 0 in KEVlatest 27 Feb

Coverage

3 articles · all timeFull timeline →

Three articles so far, 27 Feb to 10 Jul.

123
  1. Gardyn IoT flaws allow remote hacking via CVE-2025-29631SecurityWeek
  2. Gardyn IoT Hub bugs expose smart gardens to remote hijackCISA
  3. Critical flaw in Gardyn IoT Hub lets attackers run code remotelySecurityOnline
See the full timeline
  1. Critical flaw in Gardyn IoT Hub lets attackers run code remotelySecurityOnline
  2. Gardyn IoT Hub bugs expose smart gardens to remote hijackCISA · official notice
  3. Gardyn IoT flaws allow remote hacking via CVE-2025-29631SecurityWeek

All CVEs in coverage

6
CVE-2025-29631Gardyn Home Kit Firmware vulnerabilityCVSSUnrated–Not in KEV2.1%EPSS1article
CVE-2026-13768Gardyn IoT Hub Use of Hard-coded CredentialsCVSS10.0Critical–Not in KEV0.7%EPSS2articles
CVE-2025-1242Administrative Credentials Can Be Extracted Through Gardyn API ResponsesCVSSUnrated–Not in KEV0.6%EPSS1article
CVE-2025-29629Gardyn Home Kit Firmware vulnerabilityCVSSUnrated–Not in KEV0.5%EPSS1article
CVE-2026-55726Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control SphereCVSS6.9Medium–Not in KEV0.5%EPSS1article
CVE-2026-54477Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting SyntaxCVSS5.4Medium–Not in KEV0.3%EPSS1article
CVE-2025-29628Gardyn Home Kit Firmware vulnerabilityCVSSUnrated–Not in KEV0.3%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device