Home Kit Cloud API vulnerabilities

1 known vulnerability in Home Kit Cloud API from Gardyn. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Home Kit: Use of Hard-coded Credentials

  CVE-2025-1242Feb 25, 2026Gardyn

  The administrative credentials can be extracted through application API responses, mobile application reverse engineering, and device firmware reverse engineering. The exposure may result in an attacker gaining full administrative access to the Gardyn IoT Hub