Skip to content
OpenAdvisories

Vendor

Calero

3 known vulnerabilities.

Products

VeraSMART 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-26335 Public exploit

    Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE

    Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\\Program Files (x86)\\Veramark\\VeraSMART\\WebRoot\\web.config. An attacker who obtains these keys can craft a va…

    Calero VeraSMART