Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Calero VeraSMART 2022 R1 Clear all filters
TI-2026-21291 CVE-2026-26335 · GHSA-pw8j-97jq-cw6g

Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE

Priority MEDIUM 54

Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\\Program Files (x86)\\Veramark\\VeraSMART\\WebRoot\\web.config.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02996 Published 2026-02-13 Fixed in 2022 R1 CWE-321