Question 1

What is CVE-2026-113695 — CVE-2026-113695?

Accepted Answer

Reflected cross-site scripting in the SmartIT inline-image attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to inject script content into HTML responses viewed by another user.

Question 2

What is the authoritative source for CVE-2026-113695?

Accepted Answer

CVE-2026-113695 (CVE-2026-113695) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-113695CVE-2026-113695

Description

Scoring