Findings

CVE-2026-32646

A specific administrative endpoint is accessible without proper authentication, exposing device management functions.

Published Apr 3, 2026 · updated Jul 24, 2026 · mygardyn cloud api

A specific administrative endpoint is accessible without proper authentication, exposing device management functions.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 3, 2026 · NIST NVD

    Detected

    A specific administrative endpoint is accessible without proper authentication, exposing device management functions.

  2. Jul 24, 2026 · NIST NVD

    Updated

    A specific administrative endpoint is accessible without proper authentication, exposing device management functions.

Affected

  • cpe mygardyn/cloud apiversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-32646

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-32646

    A specific administrative endpoint is accessible without proper authentication, exposing device management functions.

    nvd.nist.gov

References

CVE-2026-32646 · ZeroDay Findings