PT-2025-30888 · Gardyn · Gardyn

Mselbrede · Published 2025-07-25 · Updated 2026-02-25 · CVE-2025-29628

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Gardyn version 4

Description An issue in Gardyn 4 allows a remote attacker to obtain sensitive information and execute arbitrary code via a request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Information Disclosure

Weakness Enumeration

CWE-77

CWE-200

CWE-924

Related Identifiers

CVE-2025-29628

Affected Products

Gardyn

References · 10

• 🔥 https://github.com/mselbrede/gardyn/blob/main/CVE-2025-29628_CVE-2025-29631.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-29628 · Security Note
• https://twitter.com/cracbot/status/1950511767517618286 · Twitter Post
• https://mygardyn.com/blog/security-update · Note
• https://t.me/cveNotify/153255 · Telegram Post
• http://gardyn.com · Note
• https://twitter.com/CVEnew/status/1948794749852541203 · Twitter Post
• https://t.me/cveNotify/153121 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-26-055-03 · Note
• https://t.me/cveNotify/153258 · Telegram Post