Calero Verasmart — known CVE vulnerabilities

Every CVE whose affected-product data names Calero Verasmart, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-26333 — CVSS 9.8 (critical): Calero VeraSMART versions prior to 2022 R1 expose an unauthenticated .NET Remoting HTTP service on TCP port 8001. The service publishes…
• CVE-2026-26335 — CVSS 9.8 (critical): Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored…
• CVE-2026-26334 — CVSS 7.8 (high): Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (Veramark.Core.Config…