CVE-2026-113689 | BMC IT Service Management Suite up to 25.3.01/25.4.01/26.1.01 SmartIT Work-Notes Feature cross site scripting

October 29, 2026 Yanac

A vulnerability was found in BMC IT Service Management Suite up to 25.3.01/25.4.01/26.1.01 and classified as problematic. The affected element is an unknown function of the component SmartIT Work-Notes Feature. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-113689. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More