CVE-2026-55726CWE-497

Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere

Medium · published July 2, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:L
EPSS
0.00468 · 39.6th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2026-07-02T23:49Z
EPSS history
Timeline
  • 02 JUL 23:49Z
    Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere
    cvelistv5