CVE-2026-113689

CVE-2026-113689CVE-2026-113689

Description

Stored cross-site scripting in the SmartIT work-notes feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to execute stored scripts in other users' browsers.

Scoring

Last modified2026-10-29
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.