CISA Advisory: Rently Smart Home Vulnerability Allows Credential Access

CISA released an advisory on August 25, 2026, regarding a vulnerability in Rently Smart Home versions 20.1.0 and prior. The vulnerability, identified as CVE-2026-75960, is an Insufficiently Protected Credentials issue (CWE-522) that could allow an attacker to access sensitive information and override user permissions by retrieving pins, including the Master Pin. The CVSS base score is 8.1 (High) under version 3.1 and 8.7 (High) under version 4.0. Rently has patched the vulnerability in late June, and no user action is required. CISA recommends defensive measures such as minimizing network exposure and using VPNs for remote access. No known public exploitation has been reported to CISA at this time.