CYBERSECURITYTRACKER
Permanent story citation

Rently Smart Home

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 5018

As cited

Copy frozen at (site build).

vulnerabilities

Rently Smart Home

No summary had been written when this copy was frozen.

First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Rently Smart Home

Rently Smart Home versions 20.1.0 and prior contain CVE-2026-75960, an insufficiently protected credentials vulnerability (CVSS 8.1) that allows authenticated attackers to retrieve PIN codes, including the master PIN, and override user permissions. Rently patched this vulnerability in late June 2026, and no user action is required.

Why it matters: Property managers and tenants using Rently Smart Home should verify their deployment is running the patched version, as successful exploitation could grant unauthorized access to rental properties and compromise access control systems.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Rently Smart Home

CVE-2026-75960 affects Rently Smart Home versions 20.1.0 and earlier, allowing attackers with limited privileges to retrieve protected credentials including the Master Pin through an insufficiently protected credentials vulnerability (CVSS 8.7). Rently patched the issue in late June, and no user action is required. No public exploitation has been reported to CISA as of August 25, 2026.

Why it matters: Property managers and facilities using Rently Smart Home should verify their deployment is running the patched version, as unauthorized access to master credentials could compromise physical access controls across managed properties.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Rently Smart Home

CVE-2026-75960 affects Rently Smart Home versions 20.1.0 and earlier, allowing attackers with limited privileges to retrieve protected credentials including the Master Pin through an insufficiently protected credentials vulnerability (CVSS 8.7). Rently patched the issue in late June, and no user action is required. No public exploitation has been reported to CISA as of August 25, 2026.

Why it matters: Property managers and facilities using Rently Smart Home should verify their deployment is running the patched version, as unauthorized access to master credentials could compromise physical access controls across managed properties.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary