CVE-2025-10681CWE-798

Gardyn Mobile Application and Device Firmware Use Hard-coded Credentials

High · published April 3, 2026

CVSS v4.0
8.8
EPSS
0%
Percentile
26.8
In the wild
Unconfirmed
What it is

Storage credentials are hardcoded in the mobile app and device firmware. These credentials do not adequately limit end user permissions and do not expire within a reasonable amount of time. This vulnerability may grant unauthorized access to production storage containers.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00344 · 26.8th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-04-03T20:26Z
EPSS history
Timeline
  • 03 APR 20:26Z
    Gardyn Mobile Application and Device Firmware Use Hard-coded Credentials
    cvelistv5