https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:11:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-333374 EUVD-2026-333374 https://cve.radiocsirt.org/vuln/euvd-2026-333374 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55726 <p>The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.</p> <p>The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-55726 https://cve.radiocsirt.org/vuln/ghsa-pfg9-vjvh-f5rw <p>The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.</p> <p>The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.</p> https://cve.radiocsirt.org/vuln/ghsa-pfg9-vjvh-f5rw https://cve.radiocsirt.org/vuln/icsa-26-183-03 <p>Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke an IoTHub Registry Manager function which returns connection information for all Gardyn Home Kit and Studio devices. Access to this key also allows a malicious user to execute arbitrary commands on a specific connected device and may allow the malicious user to pivot to other devices on the user&#39;s network. The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container. The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks.</p> <p>Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke an IoTHub Registry Manager function which returns connection information for all Gardyn Home Kit and Studio devices. Access to this key also allows a malicious user to execute arbitrary commands on a specific connected device and may allow the malicious user to pivot to other devices on the user&#39;s network. The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container. The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks.</p> https://cve.radiocsirt.org/vuln/icsa-26-183-03