Calero records
3 published records for vendor Calero.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-306 Missing Authentication for Critical Function1
- CWE-321 Use of Hard-coded Cryptographic Key1
- CWE-798 Use of Hard-coded Credentials1
The weakness classes this vendor ships most often: where to look.
CWEAll records
3 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
40Plan | CVE-2026-26333No exploit | Calero VeraSMART < 2022 R1 .NET Remoting Arbitrary File Read Leading to ViewState RCEcalero · verasmart · CWE-306 | Critical10.0 | 1.0%Feb 13, 2026 |
38Monitor | CVE-2026-26335Proof of concept | Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCEcalero · verasmart · CWE-321 | Critical9.3 | 2.9%Feb 13, 2026 |
34Monitor | CVE-2026-26334No exploit | Calero VeraSMART < 2026 R1 Hardcoded Static AES Keys Allow Decryption of Service Credentialscalero · verasmart · CWE-798 | High8.5 | 0.0%Feb 13, 2026 |
- CVE-2026-2633340Plan
Calero VeraSMART < 2022 R1 .NET Remoting Arbitrary File Read Leading to ViewState RCE
CriticalCVSS 10.0No exploitEPSS 1%calero · verasmartFeb 13, 2026
- CVE-2026-2633538Monitor
Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE
CriticalCVSS 9.3Proof of conceptEPSS 2%calero · verasmartFeb 13, 2026
- CVE-2026-2633434Monitor
Calero VeraSMART < 2026 R1 Hardcoded Static AES Keys Allow Decryption of Service Credentials
HighCVSS 8.5No exploitEPSS 0%calero · verasmartFeb 13, 2026