threat-intel
Gardyn IoT Hub
Critical
Summary
This advisory details a vulnerability within the Gardyn IoT Hub, specifically versions prior to 2.12.2026, that allows unauthenticated users to potentially gain control of connected devices. The vulnerability stems from a hard-coded privileged key exposing connection information and enabling arbitrary command execution. Furthermore, the system suffers from insecure admin panel configurations, increasing the risk of clickjacking and cross-site scripting attacks, alongside publicly accessible device logs.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data