Question 1

What is CVE-2026-113688 — CVE-2026-113688?

Accepted Answer

Server-side request forgery in the SmartIT URL-based attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to make server-side requests to internal services and observe response information.

Question 2

What is the authoritative source for CVE-2026-113688?

Accepted Answer

CVE-2026-113688 (CVE-2026-113688) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-113688CVE-2026-113688

Description

Scoring