CVE-2026-54477
MEDIUM
5.4
CVSS 3.1
Description
The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks.
Metadata
Severity & Metrics
5.4
MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected products (3)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| Gardyn | Gardyn Cloud API | — | 0 < 2.12.2026 |
| Gardyn | Gardyn Home Firmware | — | 0 < master.627 |
| Gardyn | Gardyn Studio Firmware | — | 0 < master.627 |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| CWE-644 | cna | CWE-644 |
CVSS scores (2)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 5.4 | MEDIUM | 3.1 | cna | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
| 5.1 | MEDIUM | 4.0 | cna | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N |
References (3)