CVE-2026-55726: Gardyn Cloud API

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.

Affected products

• Gardyn Gardyn Cloud API: before 2.12.2026 (fixed in 2.12.2026)
• Gardyn Gardyn Home Firmware
• Gardyn Gardyn Studio Firmware

Published 2026-07-03. Last modified 2026-07-06.