PT-2026-132115

CVE-2026-113692

·

Published

2026-10-29

·

Updated

2026-10-29

Description by

CVSS 4.0
6.9
Medium
MetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated administrators to read files outside the intended directory.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2026-113692
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com