Review reviewCritical
CVE-2026-28766
Gardyn Cloud API, cloud api
A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.
- CVSS
- 9.2
- EPSS
- 0.44% 35.9% percentile
- CISA KEV
- Not listed
- Published
- 2026.04.04