Live › vulnerability › CVE-2026-113692
A path traversal flaw in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01 and 26.1.01 lets a signed-in administrator read files outside the intended directory. The sources do not describe a fix or a workaround.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 14:25 UTC. All times on this page are UTC.
Organizations running BMC IT Service Management Suite versions 25.3.01, 25.4.01 or 26.1.01 where the SmartIT file-management feature is in use. The flaw requires an authenticated administrator, so exposure depends on how many people hold admin accounts. Teams not running these versions can skip it.
No product ranges from the sources yet.
25.3.01, 25.4.01 or 26.1.01 are deployedNo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated administrators to read files outside the intended directory.
This page as .md · .json · in your agent: get_signal("CVE-2026-113692")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.