Calero

3 CVEs in 1 Calero product, including Verasmart. Newest: CVE-2026-26335 (2026-02-13). Severity, EPSS and public exploits for each.

Calero products with known CVEs

ProductCVEs
Verasmart3
Calero CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-26335Critical9.82026-02-13Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\\Program File…
CVE-2026-26334High7.82026-02-13Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (Veramark.Core.Config class). These keys…
CVE-2026-26333Critical9.82026-02-13Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes default ObjectURIs (inc…