CVE-2026-54477: Gardyn Cloud API

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks.

Affected products

• Gardyn Gardyn Cloud API: before 2.12.2026 (fixed in 2.12.2026)
• Gardyn Gardyn Home Firmware
• Gardyn Gardyn Studio Firmware

Published 2026-07-03. Last modified 2026-07-06.