LIVE FEED
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider
MEDIUM CWE-497

CVE-2026-55726

Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere

Gardyn·Home Firmware

5.3/ 10
CVSS 3.1
Medium severity
0.47%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 41% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
Published
Jul 2, 2026
Updated
Jul 6, 2026
First covered
Jul 3, 2026
Latest story
4 months ago

Summary

The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.

Attack profile

Attack vectorNetwork
ComplexityLow
PrivilegesNone
User interactionNone
ScopeUnchanged
ConfidentialityLow
IntegrityNone
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

  • Gardyn Home Firmwarebefore master.627
  • Gardyn Studio Firmwarebefore master.627
  • Gardyn Cloud APIbefore 2.12.2026

References

CVE.org recordcve.org NVD entrynvd.nist.gov Advisorymygardyn.com Advisorycisa.gov Advisorygithub.com
Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed