Path Traversal Vulnerability in BMC IT Service Management Suite

CVE-2026-113692

What is CVE-2026-113692?

A path traversal vulnerability exists in the file-management feature of the BMC IT Service Management Suite, specifically affecting versions 25.3.01, 25.4.01, and 26.1.01. This issue allows authenticated administrators to access files stored outside of the designated directory, potentially exposing sensitive information and configuration files. Organizations using this suite should take immediate action to mitigate this risk by applying available patches and reviewing their file access controls.

References