https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-32662.htmlhttps://patchthecve.com/cve/CVE-2026-32662.htmlFri, 24 Jul 2026 22:10:00 +0000MEDIUM 5.3: Development and test API endpoints are present that mirror production functionality.https://patchthecve.com/cve/CVE-2026-32646.htmlhttps://patchthecve.com/cve/CVE-2026-32646.htmlFri, 24 Jul 2026 22:10:00 +0000HIGH 7.5: A specific administrative endpoint is accessible without proper authentication, exposing device management functions.https://patchthecve.com/cve/CVE-2026-28767.htmlhttps://patchthecve.com/cve/CVE-2026-28767.htmlFri, 24 Jul 2026 22:10:00 +0000MEDIUM 5.3: A specific administrative endpoint notifications is accessible without proper authentication.https://patchthecve.com/cve/CVE-2026-28766.htmlhttps://patchthecve.com/cve/CVE-2026-28766.htmlFri, 24 Jul 2026 22:10:00 +0000CRITICAL 9.3: A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.https://patchthecve.com/cve/CVE-2026-25197.htmlhttps://patchthecve.com/cve/CVE-2026-25197.htmlFri, 24 Jul 2026 22:10:00 +0000CRITICAL 9.1: A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.