A specific administrative endpoint is accessible without proper authentication, exposing device management functions.

CVE-2026-32646 describes a vulnerability where a specific administrative endpoint is accessible without proper authentication, exposing device management functions. This authentication bypass vulnerability allows unauthorized access to administrative controls, potentially enabling attackers to manipulate device configurations and operations. The vulnerability affects operational technology (OT) systems and has been documented by CISA in advisory ICSA-26-055-03. The issue appears to be related to Gardyn devices based on the security advisory links. This represents a significant security risk as it provides direct access to administrative functions without authentication requirements.