Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
[CVE-2026-28766: CRITICAL] A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.#cve,CVE-2026-28766,#cybersecurity https://cvefind.com/CVE-2026-28766
Post summary
The tweet announces a critical information‑disclosure flaw (CVE‑2026‑28766) in Gardyn that reveals user data via an unauthenticated endpoint, with no PoC or exploitation evidence shared.
🔴 CVE-2026-28766 - Critical A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication. https://www.thehackerwire.com/vulnerability/CVE-2026-28766/ https://t.co/gJ8Hlw6pKi
Post summary
The tweet announces CVE‑2026‑28766 as a critical information‑disclosure flaw in Gardyn that allows unauthenticated users to retrieve all user account data.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mygardyn | cloud_api | - | - | - |