CVE-2026-113688
MEDIUM—CVSS v3
—CVSS v2
—
EPSS (exploit probability)
CWE-918CWE
Description
Server-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to make server-side requests to internal services and observe response information.
Affected routers (0)
No routers currently mapped to this CVE in our database.