CVE-2026-113691

CVE-2026-113691CVE-2026-113691

Description

Stored cross-site scripting in the SmartIT knowledge-article feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to execute stored scripts in other users' browsers.

Scoring

Last modified2026-10-29
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.