Vulnerabilities

CVSS

5.3 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Risk score

42.4

Published

2026-07-02

Status

Published

The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.

Weaknesses

CWE-497

Coverage 1

threat-intel

Gardyn IoT Hub

This advisory details a vulnerability within the Gardyn IoT Hub, specifically versions prior to 2.12.2026, that allows unauthenticated users to potentially gain control of connected devices. The vulnerability stems from…

CISA Advisories · Jul 2, 2026 Critical

CVE-2026-13768CVE-2026-55726CVE-2026-54477USiotvulnerabilitycommand execution

All articles mentioning it

Advisories and references

• mygardyn.com/security/
• cisa.gov/news-events/ics-advisories/icsa-26-183-03
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...