Advisories › Rently › ICSA-26-237-01
Rently Smart Home: 1 CVE, High 8.1
Summary
CISA reports 1 vulnerability in Rently Smart Home. Weakness type: Insufficiently Protected Credentials. Successful exploitation of this vulnerability could allow an attacker to access sensitive information and override user permissions. Highest CVSS v3 score: 8.1 (High), exploitable over the network.
What to do: Prioritize: Rently has patched this vulnerability in late June. No user action is required.
At a glance
- Vendor
- Rently
- Products
- Smart Home
- CVEs
- CVE-2026-75960
- Highest CVSS v3
- 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Highest CVSS v4
- –
- Known exploited (KEV)
- No CVE from this advisory is on the KEV list as of the last refresh
- Sectors (per CISA)
- Commercial Facilities, Communications, Information Technology
- Deployed
- United States, India
- Vendor HQ
- United States
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2026-75960 | Insufficiently Protected Credentials | 8.1 | – | No | Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions. |
Affected products (1)
- Rently Smart Home: <=20.1.0
Vendor fixes and mitigations (from advisory)
- Mitigation: Rently has patched this vulnerability in late June. No user action is required.
- Mitigation: For more information, contact Rently ([email protected]). link
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.