CVE-2026-75960

Name of the Vulnerable Software and Affected Versions Rently Smart Home versions 20.1.0 and earlier

Description Insufficiently protected credentials in the API allow an attacker to retrieve pins, including the Master Pin. This issue enables the override of standard user permissions, potentially granting access to an entire apartment complex from a single resident login. Real-world incidents have been reported where attackers exploited this to retrieve Master Pins across IoT infrastructure.

Recommendations Update Rently Smart Home to a version later than 20.1.0.