{"vulnerability": "CVE-2026-13768", "sightings": [{"uuid": "18bab485-2e55-44ff-871c-9899c3ea1239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-03", "content": "", "creation_timestamp": "2026-07-02T17:15:03.045163Z"}, {"uuid": "46aef485-8727-41e2-b489-0bf042e3e665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-13768", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116853102484273046", "content": "CVE-2026-13768: Gardyn Home Firmware (CRITICAL, CVSS 10) exposes a privileged iothubowner key, enabling attackers to control devices & move laterally on networks. No patch yet. Monitor and segment IoT devices. https://radar.offseq.com/threat/cve-2026-13768-cwe-798-in-gardyn-gardyn-home-firmw-08332214fc38f3ba #OffSeq #IoTSecurity #CVE202613768", "creation_timestamp": "2026-07-03T00:00:42.923308Z"}, {"uuid": "712ced5b-b46c-4a73-b360-c79d7aea4c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-13768", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mppaiuvoja27", "content": "Gardyn Home Firmware hit by CRITICAL vuln (CVE-2026-13768): leaked iothubowner key lets attackers control devices & access network info. No fix yet \u2014 review segmentation & monitor activity. https://radar.offseq.com/threat/cve-2026-13768-cwe-798-in-gardyn-gardyn-home-firmw-08332214fc38f3ba #OffSeq...", "creation_timestamp": "2026-07-03T00:00:46.109005Z"}, {"uuid": "452c4f44-5ff4-437d-84a3-c9d3b9c6acad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpplqq2bdi23", "content": "CVE-2026-13768 - Gardyn IoT Hub Use of Hard-coded Credentials\nCVE ID : CVE-2026-13768\n \n Published : July 2, 2026, 11:40 p.m. | 2\u00a0hours, 6\u00a0minutes ago\n \n Description : Gardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious user to invoke ...", "creation_timestamp": "2026-07-03T03:21:58.988343Z"}, {"uuid": "f24e54c9-cc56-4864-af69-9b63a77b022f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpra3mo23q2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-13768 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Gardyn: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/D772835A-8DBA-4507-B09D-0902155162FC", "creation_timestamp": "2026-07-03T18:58:38.696376Z"}, {"uuid": "a2ad3d9d-5bbb-43c8-846c-d581412b3113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mprkdmuib42x", "content": "CVE-2026-13768 - gardyn home firmware\nGardyn IoT devices have a security flaw that allows hackers to access sensitive information about all connected devices and potentially take control of them. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gardyn #CVE #infosec", "creation_timestamp": "2026-07-03T22:02:04.810906Z"}, {"uuid": "1251fe28-0b15-4f9e-8976-d4acfc1758ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpwrvd35fs2f", "content": "\ud83d\udd34 CVE-2026-13768 - Critical (10)\n\nGardyn devices expose a privileged iothubowner key. Access to this key will allow a malicious use...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-13768/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-06T00:00:34.405872Z"}, {"uuid": "96fe8cc5-51ff-4392-a8b4-395053b8e5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://t.me/GithubRedTeam/93032", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a J4ck3LSyN-Gen2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 23:34:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAzure IoT Hub where exposure of an owner-level Shared Access Key enables unauthenticated remote code execution (RCE) against connected IoT devices. Proof-Of-Concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:04.323955Z"}, {"uuid": "3dc31691-ba5c-4521-96ba-faa20b16cde1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://t.me/GithubRedTeam/91654", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MichaelAdamGroberman\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 20:50:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-13768: Privileged iothubowner IoT Hub credential \u2014 fleet enumeration, device RCE, home-network pivot \u2014 Gardyn (ICSA-26-183-03)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:13.951412Z"}, {"uuid": "238a18f4-3102-405c-bba8-533ace033552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93032", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a J4ck3LSyN-Gen2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 23:34:10\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAzure IoT Hub where exposure of an owner-level Shared Access Key enables unauthenticated remote code execution (RCE) against connected IoT devices. Proof-Of-Concept\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:08.559249Z"}, {"uuid": "7b39f724-fd17-45d1-b327-36b5e597acf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://t.me/GithubRedTeam/91654", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MichaelAdamGroberman\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 20:50:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-13768: Privileged iothubowner IoT Hub credential \u2014 fleet enumeration, device RCE, home-network pivot \u2014 Gardyn (ICSA-26-183-03)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.837016Z"}, {"uuid": "0cf749f6-9f72-418d-96c7-8b1b6a9ae766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "https://t.me/GithubRedTeam/91654", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-13768\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MichaelAdamGroberman\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 20:50:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-13768: Privileged iothubowner IoT Hub credential \u2014 fleet enumeration, device RCE, home-network pivot \u2014 Gardyn (ICSA-26-183-03)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:28.209164Z"}, {"uuid": "02429f63-3f09-4bc6-902c-2d33f1a8edf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "Telegram/0fKk4L1TX3p6i3LSTa87VH4DqMhPOD4NuJb6FkzZ2HxTnRc", "content": "", "creation_timestamp": "2026-07-16T19:00:11.272723Z"}, {"uuid": "f7906fde-f49c-4833-b0ea-0c237efff88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "Telegram/JdBHiwjbvdl3gwweamRxTbBNaDYyC40kxoHhWpTKu91yjQ4", "content": "", "creation_timestamp": "2026-07-16T19:00:11.424798Z"}, {"uuid": "8d4d1afe-710d-42e2-aba3-dd0842240956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "Telegram/mnW-tmZuEnweuCVXm-A5A-4FpIIj2EBp_E57S-kJsnFSuow", "content": "", "creation_timestamp": "2026-07-16T19:00:23.371413Z"}, {"uuid": "eff257c2-472d-4654-8231-db9a41a6aefd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "Telegram/0fKk4L1TX3p6i3LSTa87VH4DqMhPOD4NuJb6FkzZ2HxTnRc", "content": "", "creation_timestamp": "2026-07-17T00:00:26.843909Z"}, {"uuid": "4085d2f4-f1a6-4c87-b650-f30a5b9b5349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "seen", "source": "Telegram/mnW-tmZuEnweuCVXm-A5A-4FpIIj2EBp_E57S-kJsnFSuow", "content": "", "creation_timestamp": "2026-07-17T00:00:40.526477Z"}, {"uuid": "9722257f-7b56-4425-8f25-2494cd2866a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "published-proof-of-concept", "source": "Telegram/JdBHiwjbvdl3gwweamRxTbBNaDYyC40kxoHhWpTKu91yjQ4", "content": "", "creation_timestamp": "2026-07-17T01:00:04.418442Z"}, {"uuid": "f15f07e4-6d89-43e3-b869-d6af470b568a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "published-proof-of-concept", "source": "Telegram/mnW-tmZuEnweuCVXm-A5A-4FpIIj2EBp_E57S-kJsnFSuow", "content": "", "creation_timestamp": "2026-07-18T00:00:10.726680Z"}, {"uuid": "8f92cbd4-f39f-447b-a0ca-a786000e4f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13768", "type": "published-proof-of-concept", "source": "Telegram/JdBHiwjbvdl3gwweamRxTbBNaDYyC40kxoHhWpTKu91yjQ4", "content": "", "creation_timestamp": "2026-07-18T00:00:45.392121Z"}]}