CVE-2026-26333: CWE-306 Missing Authentication for Critical Function in Calero V Calero VeraSMART versions prior to 2022 R1 contain a critical vulnerability (CVE-2026-26333) due to missing authentication on a .NET Remoting HTTP service exposed on TCP port 8001. This service publishes default ObjectURIs such as EndeavorS

Calero VeraSMART pre-2022 R1 hit by CRITICAL RCE flaw: unauthenticated attackers can exploit port 8001 for full server compromise. Restrict access & upgrade now. radar.offseq.com/threat/cve-2026-26333-cw... #OffSeq #CVE202626333 #CyberAlert