CVE-2025-10681 HIGH

CVE-2025-10681: Gardyn Mobile Application and Device Firmware Use Hard-coded Credentials

Vendor Gardyn
Product Mobile Application
Weakness CWE-798 · Hardcoded credentials
Published April 3, 2026
Last update April 6, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Storage credentials are hardcoded in the mobile app and device firmware. These credentials do not adequately limit end user permissions and do not expire within a reasonable amount of time. This vulnerability may grant unauthorized access to production storage containers.

Key dates

02Disclosure timeline

April 3, 2026 CVE published
April 6, 2026 Record updated