CVE-2026-28767

Mô tả

Tham khảo

• cisagov/CSAF · Third Party Advisory
• mygardyn.com/security · Vendor Advisory
• cisa.gov/news-events/ics-advisories/icsa-26-055-03 · Third Party Advisory

Lỗ hổng khác của cloud api

• CVE-2026-32662TRUNG BÌNH 5.3Development and test API endpoints are present that mirror production functionality.
• CVE-2026-32646CAO 7.5A specific administrative endpoint is accessible without proper authentication, exposing device management functions.
• CVE-2026-28766CAO 7.5A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.
• CVE-2026-25197CAO 8.1A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.