Vulnerability · Published Apr 3, 2026 · Assigned by icscert

CVE-2026-32662Gardyn Cloud API Active Debug Code

Medium 5.3

In plain English

A medium-severity security flaw in Cloud API from Gardyn. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.3%top 73.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

Development and test API endpoints are present that mirror production functionality.

Affected products (as reported)

VendorProductVersions
Gardyn Cloud API 0 – before 2.12.2026

Weakness: CWE-489 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References