CVE-2026-113696
CVE-2026-113696 · Improper Authorization in BMC ITSM SmartIT Change Approvals
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to make unauthorized changes to approval state and bypass intended approval restrictions.
CVSS 5.3 · Mittel · EPSS 0,4% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Betroffene Produkte und Versionen
bmc it service management suite
- Softwareversionen
- 25.3.01: Betroffen (custom)
- 25.3.01 hotfix 10: Nicht betroffen (custom)
- 25.4.01: Betroffen (custom)
- 25.4.01 hotfix 22: Nicht betroffen (custom)
- 26.1.01: Betroffen (custom)
- 26.1.01 hotfix 12: Nicht betroffen (custom)
Auf 25.4.01 hotfix 22 aktualisieren; Auf 26.1.01 hotfix 12 aktualisieren
Originalquellen
- https://github.com/NCSC-Assess/Advisories/blob/main/advisories/2026/CVE-2026-113696/advisory.md
- https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid25301/Release-notes-and-notices/Known-and-corrected-issues/
- https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid25401/Release-notes-and-notices/Known-and-corrected-issues/
- https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid26101/Release-notes-and-notices/Known-and-corrected-issues/
- https://nvd.nist.gov/vuln/detail/CVE-2026-113696