Calero
Calero Verasmart: vulnerabilities and CVEs
Calero Verasmart has 3 published vulnerabilities, 3 of them in the last 12 months. 2 are rated critical and 0 are listed by CISA as actively exploited.
CVEs3
Last 12 months3
Critical2
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-26335 | Critical (9.3) | 2.6% | — | Feb 13, 2026 | Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\\Program Files (x86)\\Veramark\\VeraSMART\\WebRoot\\web.config. An… |
| CVE-2026-26334 | High (8.5) | 0.10% | — | Feb 13, 2026 | Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (Veramark.Core.Config class). These keys are used to encrypt the password of the service account… |
| CVE-2026-26333 | Critical (10) | 1.3% | — | Feb 13, 2026 | Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes default ObjectURIs (including EndeavorServer.rem and RemoteFileReceiver.rem) and… |