Stored Cross-Site Scripting in SmartIT by BMC

CVE-2026-113690

What is CVE-2026-113690?

A stored cross-site scripting vulnerability exists in the attachment feature of BMC's SmartIT. This security flaw allows authenticated users to upload malicious scripts that can be executed in the browsers of other users, potentially leading to unauthorized actions or data exposure. It is crucial for users of affected versions to apply necessary updates or patches to mitigate this risk.

References