CVE-2026-75960CWE-522

CVE-2026-75960

High · published August 26, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-08-26T18:17Z
References (1)
https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-01 · [email protected]
EPSS history
Timeline
  • 28 AUG 06:53Z
    EPSS moved — → 0%
    epss
  • 26 AUG 13:20Z
    Insufficiently Protected Credentials in Rently Smart Home
    cvelistv5