CVE-2026-113690

MEDIUM

MEDIUM Priority: 0.00 BB Relevance: 50/100

Published: 2026-10-29 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity

CVSS Vector Breakdown

AV: Network

AC: Low

PR: Low

UI: Active

S: X

AT: None

VC: None

VI: None

VA: None

Description

Stored cross-site scripting in the SmartIT attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to execute uploaded script content in other users' browsers.

Weakness Classification (1)

CWE-79

Affected Software (6)

Vendor	Product	Version
BMC	BMC IT Service Management Suite	25.3.01
BMC	BMC IT Service Management Suite	25.4.01
BMC	BMC IT Service Management Suite	26.1.01
BMC	BMC IT Service Management Suite	25.3.01
BMC	BMC IT Service Management Suite	25.4.01
BMC	BMC IT Service Management Suite	26.1.01

References & Advisories (4)

https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid25301/Release-notes-and-notices/Known-and-corrected-issues/

https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid25401/Release-notes-and-notices/Known-and-corrected-issues/

https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid26101/Release-notes-and-notices/Known-and-corrected-issues/

https://github.com/NCSC-Assess/Advisories/blob/main/advisories/2026/CVE-2026-113690/advisory.md

Bug Bounty Relevance

50 / 100

✓ Network accessible
✓ Low complexity

CVSS Score

4.8 / 10.0 v4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

mitre ref →

nvd ref →

External Links

NVD (NIST) CVE Details FIRST EPSS API OSV.dev