Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
added 2026/02/13 8:51 p.m.9 views

CVE-2026-26335 Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE

Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\Program Files x86\Veramark\VeraSMART\WebRoot\web.config. An attacker who obtains these keys can craft a valid ASP.NET ViewState payload that passes...

9.3CVSS6.6AI score0.02806EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2026/02/13 8:51 p.m.35 views

CVE-2026-26335 Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE

Calero VeraSMART versions prior to 2022 R1 use static ASP.NET/IIS machineKey values configured for the VeraSMART web application and stored in C:\Program Files x86\Veramark\VeraSMART\WebRoot\web.config. An attacker who obtains these keys can craft a valid ASP.NET ViewState payload that passes...

9.3CVSS0.02806EPSS
SaveExploits3References2
Rows per page
Query Builder