CVE-2026-113696
NoneCVSS
—
EPSS
0.4%
Published
Oct 29, 2026
CISA due date
—
The record
Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to make unauthorized changes to approval state and bypass intended approval restrictions.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-62989 Shopper is a Headless e-commerce Admin Panel. CWE-285
- CVE-2026-119330 Immich is a high-performance self-hosted photo and video management solution. CWE-285
- CVE-2026-55551 ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case… CWE-285
- CVE-2026-112905 Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or… CWE-285
- CVE-2026-104316 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any… CWE-285
- CVE-2026-113694 Improper authorization in the SmartIT user attachment feature of BMC IT Service… CWE-285
- CVE-2026-42949 A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA… CWE-285
- CVE-2026-42922 A authorization bypass vulnerability exists in the /nodered functionality of FUXA… CWE-285