CVE-2026-113694
MEDIUM—CVSS v3
—CVSS v2
—
EPSS (exploit probability)
CWE-285CWE
Description
Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to access or modify attachment resources belonging to other users.
Affected routers (0)
No routers currently mapped to this CVE in our database.