Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-54477 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-183-03.json [email protected]AdvisoryBundleRemedy
https://mygardyn.com/security/ [email protected]AdvisoryBundleRemedyVendor
https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-03 [email protected]AdvisoryBundleRemedy

Weakness Enumeration

CWE-IDCWE NameSource
CWE-644Improper Neutralization of HTTP Headers for Scripting Syntax[email protected]

Affected Products

ProductVersions
Gardyn Home
All versions

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • Mitigation:low effort

    Ensure your Gardyn device is connected to the Internet. Devices that are online will automatically receive updates. You can verify the connection status in the Gardyn mobile app.

  • Mitigation:low effort

    Check the firmware version of your Gardyn device in the Gardyn mobile app: Settings → Advanced. The firmware version must be 619 or later to contain the necessary fixes.

  • Mitigation:low effort

    Update the Gardyn mobile app to version 2.11.0 or later. The app typically updates automatically when opened. You can verify the app version in the Gardyn mobile app: Settings → Advanced.

  • Mitigation:low efforthttps://mygardyn.com/security/
  • Mitigation:low effortmailto:[email protected]
Gardyn Studio
All versions

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • Mitigation:low effort

    Ensure your Gardyn device is connected to the Internet. Devices that are online will automatically receive updates. You can verify the connection status in the Gardyn mobile app.

  • Mitigation:low effort

    Check the firmware version of your Gardyn device in the Gardyn mobile app: Settings → Advanced. The firmware version must be 619 or later to contain the necessary fixes.

  • Mitigation:low effort

    Update the Gardyn mobile app to version 2.11.0 or later. The app typically updates automatically when opened. You can verify the app version in the Gardyn mobile app: Settings → Advanced.

  • Mitigation:low efforthttps://mygardyn.com/security/
  • Mitigation:low effortmailto:[email protected]
Gardyn Cloud API
< 2.12.2026 (semver)

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • Mitigation:low effort

    Ensure your Gardyn device is connected to the Internet. Devices that are online will automatically receive updates. You can verify the connection status in the Gardyn mobile app.

  • Mitigation:low effort

    Check the firmware version of your Gardyn device in the Gardyn mobile app: Settings → Advanced. The firmware version must be 619 or later to contain the necessary fixes.

  • Mitigation:low effort

    Update the Gardyn mobile app to version 2.11.0 or later. The app typically updates automatically when opened. You can verify the app version in the Gardyn mobile app: Settings → Advanced.

  • Mitigation:low efforthttps://mygardyn.com/security/
  • Mitigation:low effortmailto:[email protected]

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-54477
NVD Published Date:
Jul 3, 2026
NVD Last Modified:
Jul 6, 2026
Source:
[email protected]
CVE-2026-54477 Details - Not Deferred