Review reviewCritical
CVE-2026-25197
Gardyn Cloud API, cloud api
A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.
- CVSS
- 9.3
- EPSS
- 0.29% 21.8% percentile
- CISA KEV
- Not listed
- Published
- 2026.04.04