What is CVE-2026-26334?

CVE-2026-26334 is a high-severity vulnerability in Calero Verasmart, classified under Use of Hard-coded Credentials. CVSS score: 7.8/10. Published 2026-02-13.

How severe is CVE-2026-26334?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Calero Verasmart

CVE-2026-26334

Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (Veramark.Core.Config class). These keys are used to encrypt the password of the service account stored in C:\\VeraSMART…

EPSS: 0.001 (0.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Calero Verasmart — versions 0, 2026.0

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

disclosure@vulncheck.com (Product, product)
disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2026-26334?: CVE-2026-26334 is a high-severity vulnerability in Calero Verasmart, classified under Use of Hard-coded Credentials. CVSS score: 7.8/10. Published 2026-02-13.
How severe is CVE-2026-26334?: High severity. CVSS v3 base score is 7.8 out of 10.