Will Gardyn IoT Hub CVEs lead to documented device compromise by end of 2026?

CISA alert identifies three critical CVEs in Gardyn IoT Hub (CVE-2026-13768, CVE-2026-55726, CVE-2026-5447) affecting Cloud API versions <2.12.2026, permitting unauthenticated access and control of managed devices. Resolution requires confirmed breach disclosure or public incident attribution.

Resolution Criteria

Public disclosure by CISA, Gardyn, or reputable security researcher of documented compromise of Gardyn IoT Hub devices; includes case studies, log evidence, or victim statement naming the CVEs.