CVE-2026-113693

MEDIUM
—CVSS v3
—CVSS v2
— EPSS (exploit probability)
CWE-200CWE

Description

Exposure of sensitive information in the SmartIT system-account settings of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to retrieve a system username and encrypted password value.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references