CVE-2026-54477

CVSS: 5.4 Medium
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Risk score: 43.2
Published: 2026-07-02
Status: Published

The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks.

Weaknesses

CWE-644

Coverage 1

threat-intel

Gardyn IoT Hub

This advisory details a vulnerability within the Gardyn IoT Hub, specifically versions prior to 2.12.2026, that allows unauthenticated users to potentially gain control of connected devices. The vulnerability stems from…

CISA Advisories · Jul 2, 2026 Critical

CVE-2026-13768 CVE-2026-55726 CVE-2026-54477 US iot vulnerability command execution

All articles mentioning it

Advisories and references

mygardyn.com/security/
cisa.gov/news-events/ics-advisories/icsa-26-183-03
github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...

news.mlab.sh

CVE-2026-54477

Weaknesses

Coverage 1

Gardyn IoT Hub

Advisories and references