{"vulnerability": "CVE-2026-13768", "sightings": [{"uuid": "18bab485-2e55-44ff-871c-9899c3ea1239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-03", "content": "", "creation_timestamp": "2026-07-02T17:15:03.045163Z"}, {"uuid": "46aef485-8727-41e2-b489-0bf042e3e665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-13768", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116853102484273046", "content": "CVE-2026-13768: Gardyn Home Firmware (CRITICAL, CVSS 10) exposes a privileged iothubowner key, enabling attackers to control devices & move laterally on networks. No patch yet. Monitor and segment IoT devices. https://radar.offseq.com/threat/cve-2026-13768-cwe-798-in-gardyn-gardyn-home-firmw-08332214fc38f3ba #OffSeq #IoTSecurity #CVE202613768", "creation_timestamp": "2026-07-03T00:00:42.923308Z"}, {"uuid": "712ced5b-b46c-4a73-b360-c79d7aea4c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-13768", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mppaiuvoja27", "content": "Gardyn Home Firmware hit by CRITICAL vuln (CVE-2026-13768): leaked iothubowner key lets attackers control devices & access network info. No fix yet \u2014 review segmentation & monitor activity. https://radar.offseq.com/threat/cve-2026-13768-cwe-798-in-gardyn-gardyn-home-firmw-08332214fc38f3ba #OffSeq...", "creation_timestamp": "2026-07-03T00:00:46.109005Z"}, {"uuid": "452c4f44-5ff4-437d-84a3-c9d3b9c6acad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpplqq2bdi23", "content": "CVE-2026-13768 - Gardyn IoT Hub Use of Hard-coded Credentials\nCVE ID : CVE-2026-13768\n \n Published : July 2, 2026, 11:40 p.m. | 2\u00a0hours, 6\u00a0minutes ago\n \n Description : Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke ...", "creation_timestamp": "2026-07-03T03:21:58.988343Z"}]}