What is the CVSS score of CVE-2026-26334?

CVE-2026-26334 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2026-26334?

Within 24 hours: Inventory all VeraSMART deployments and identify systems running versions prior to 2026 R1. Within 7 days: Implement network segmentation to restrict access to VeraSMART servers and rotate all service account credentials used by VeraSMART. Within 30 days: Upgrade to VeraSMART 2026 R1 or later when available, or contact Calero for a timeline and interim security guidance.

Verasmart CVE-2026-26334

HIGH

Use of Hard-coded Credentials (CWE-798)

2026-02-13 disclosure@vulncheck.com

Windows Privilege Escalation Verasmart Calero

7.8

CVSS 3.1 · NVD

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Obtain local system access
Delivery

Extract Veramark.Framework.dll from installation
Exploit

Retrieve hardcoded AES keys from Veramark.Core.Config
Execution

Decrypt app.settings password
Persist

Authenticate as service account
Impact

Escalate privileges

Vulnerability Assessment

Weakness	CWE CWE-798 OWASP Top 10:2025 A07:2025 - Authentication Failures ASVS 5.0 V6 - Authentication Credential externalization MITRE ATT&CK 2 techniques across 2 tactics: Persistence, Credential Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Exploitation Conditions	Local access to Calero VeraSMART system with read access to C:\VeraSMART Data\app.settings and Veramark.Framework.dll file. Affected versions: prior to 2026 R1. Requires ability to examine local files and execute decryption tools.
Impact	CVSS 7.8 (HIGH). Attack vector: Local. Complexity: Low. Privileges required: Low. User interaction: None. Exploitable via local access.
Exploit ScenarioDerived	An attacker could exploit this flaw, local privilege escalation depending on the privileges of th.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

No patch listed yet 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

Local privilege escalation in Calero VeraSMART versions before 2026 R1 stems from hardcoded AES encryption keys embedded in Veramark.Framework.dll that protect service account credentials stored in app.settings. An attacker with local system access can extract these static keys, decrypt the stored passwords, and use the recovered credentials to authenticate as the service account, potentially gaining elevated privileges depending on that account's permissions. No patch is currently available for this vulnerability.

Earlier versions of this analysis (1)

v1 Mar 12, 2026 - 22:02 CVSS 7.8

RemediationAI

Monitor vendor advisories for a patch.

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

Classified as CWE-798 (Use of Hard-coded Credentials). Affects Verasmart. Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (Veramark.Core.Config class). These keys are used to encrypt the password of the service account stored in C:\\VeraSMART Data\\app.settings. An attacker with local access to the system can extract the hardcoded keys from the Veramark.Framework.dll module and decrypt the stored credentials. The recovered credentials can then be used to authenticate to the Windows host, potentially

Know when Verasmart gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

DescriptionCVE.org

Calero VeraSMART versions prior to 2026 R1 contain hardcoded static AES encryption keys within Veramark.Framework.dll (Veramark.Core.Config class). These keys are used to encrypt the password of the service account stored in C:\\VeraSMART Data\\app.settings. An attacker with local access to the system can extract the hardcoded keys from the Veramark.Framework.dll module and decrypt the stored credentials. The recovered credentials can then be used to authenticate to the Windows host, potentially resulting in local privilege escalation depending on the privileges of the configured service account.

Executive ViewAI

Why It Matters

Calero VeraSMART installations contain hardcoded encryption keys that compromise the security of service account credentials stored on affected systems. An attacker with local or network access to the application could extract and decrypt these passwords, potentially gaining unauthorized access to critical infrastructure and data managed by VeraSMART.

Business Impact: High

Compensating Controls

Implement strict network segmentation to limit access to VeraSMART servers; restrict local administrative access to systems running VeraSMART; deploy endpoint detection and response (EDR) tools to monitor for unauthorized credential extraction; implement file integrity monitoring on Veramark.Framework.dll and C:\VeraSMART Data\app.settings; rotate service account passwords immediately and monitor for suspicious authentication activity; consider disabling VeraSMART features if operationally feasible until patch is released.

Threat Intelligence Overview

EPSS Score

0.0%

Top 100% exploitable

Data Quality

3 sources

Confidence: Low

NVD

CVE.org

EPSS

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC No

EPSS 0.0%

Patch available No

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Scheduled

Exploitation· derived

None

System Exposure· derived

Small

Automatable· derived

Human Impact

High

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +39

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Privilege Escalation HIGH

Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.