Medium 5.3

Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite...

CVE-2026-113696 First seen on SecPulse Oct 29, 22:29

Affected packages

Ecosystem	Package	Affected	Fixed
BMC	BMC IT Service Management Suite	—	—

Original description The description as published by the source.

Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to make unauthorized changes to approval state and bypass intended approval restrictions.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v4: Medium 5.3; CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Published: Oct 29, 2026
First seen on SecPulse: Oct 29, 22:29
GHSA: GHSA-26rw-pg2c-4rv7
CWE: CWE-285

NVD GitHub Advisory

Tags(click for explanation)

CWE

CWE-285

All

Bmc Bmc It Service Management Suite

Detection sources

NIST National Vulnerability Database00:59
GitHub Security Advisories (Global)00:30
CVE.org (CVE Program・cvelistV5)Oct 29, 22:49