CVE-2026-13768
Gardyn IoT Hub Use of Hard-coded Credentials
Description
Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke an IoTHub Registry Manager function which returns connection information for all Gardyn Home Kit and Studio devices. Access to this key also allows a malicious user to execute arbitrary commands on a specific connected device and may allow the malicious user to pivot to other devices on the user's network.
INFO
Published Date :
July 2, 2026, 11:40 p.m.
Last Modified :
July 2, 2026, 11:40 p.m.
Remotely Exploit :
Yes !
Source :
icscert
Affected Products
The following products are affected by CVE-2026-13768
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | CRITICAL | 7d14cffa-0d7d-4270-9dc0-52cabd5a23a6 | ||||
| CVSS 4.0 | CRITICAL | 7d14cffa-0d7d-4270-9dc0-52cabd5a23a6 |
Solution
- Revoke and re-issue the privileged iothubowner key.
- Implement strict access controls for IoTHub functions.
- Disable or restrict remote command execution.
- Segment the user's network to limit pivot.
Public PoC/Exploit Available at Github
CVE-2026-13768 has a 2 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
CISA Advisory ICSA-26-183-03 - Gardyn IoT Hub - 3 CVEs (companion to ICSA-26-055-03)
azure-iot cisa coordinated-disclosure cve gardyn iot-security remote-code-execution security-research
CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device RCE, home-network pivot — Gardyn (ICSA-26-183-03)
azure-iot-hub cisa cve gardyn hardcoded-credentials iot-security remote-code-execution security-research vulnerability-disclosure
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-13768 vulnerability anywhere in the article.