Calero

Products

ProductCVEsExploitedLatest
VeraSMART3–Feb 13, 2026

Exploited and recent CVEs

  • CVE-2026-26334 High 8.5 Calero VeraSMART < 2026 R1 Hardcoded Static AES Keys Allow Decryption of Service Credentials <0.1%
  • CVE-2026-26333 Critical 10.0 Calero VeraSMART < 2022 R1 .NET Remoting Arbitrary File Read Leading to ViewState RCE 1.1%
  • CVE-2026-26335 Critical 9.3 Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE 3.0%