{"id":"CVE-2026-113694","aliases":[],"cve":{"records":[{"id":"CVE-2026-113694","source":"NCSC","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-20T15:07:33.735Z","published":"2026-10-29T13:12:52.855Z","modified":"2026-10-29T13:51:08.903Z"}],"publishers":[{"name":"NCSC","role":"CNA","organizationId":"47237f96-ddbe-4467-a5ee-293a770beacd","modified":"2026-10-29T13:12:52.855Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-29T13:51:08.903Z"}],"references":[{"url":"https://github.com/NCSC-Assess/Advisories/blob/main/advisories/2026/CVE-2026-113694/advisory.md","tags":[],"source":"NCSC"},{"url":"https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid25301/Release-notes-and-notices/Known-and-corrected-issues/","tags":[],"source":"NCSC"},{"url":"https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid25401/Release-notes-and-notices/Known-and-corrected-issues/","tags":[],"source":"NCSC"},{"url":"https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid26101/Release-notes-and-notices/Known-and-corrected-issues/","tags":[],"source":"NCSC"}],"weaknesses":[{"id":"CWE-285","description":"CWE-285 Improper Authorization","source":"NCSC"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-29T13:50:57.458750Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Improper Authorization in BMC ITSM SmartIT Attachments","titleSource":"NCSC","descriptionSource":"NCSC","description":"Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated users to access or modify attachment resources belonging to other users.","score":5.3,"severity":"medium","published":"2026-10-29T13:12:52.855Z","modified":"2026-10-29T13:51:08.903Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"BMC","name":"BMC IT Service Management Suite","platforms":[],"versions":[{"version":"25.3.01","status":"affected","versionType":"custom"},{"version":"25.3.01 hotfix 10","status":"unaffected","versionType":"custom"},{"version":"25.4.01","status":"affected","versionType":"custom"},{"version":"25.4.01 hotfix 22","status":"unaffected","versionType":"custom"},{"version":"26.1.01","status":"affected","versionType":"custom"},{"version":"26.1.01 hotfix 12","status":"unaffected","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"NCSC","url":"https://www.cve.org/CVERecord?id=CVE-2026-113694"}],"remediation":[{"text":"Apply BMC IT Service Management Suite 25.3.01 hotfix 10, 25.4.01 hotfix 22, or 26.1.01 hotfix 12, as applicable.","source":"NCSC","url":"https://www.cve.org/CVERecord?id=CVE-2026-113694"}],"references":["https://github.com/NCSC-Assess/Advisories/blob/main/advisories/2026/CVE-2026-113694/advisory.md","https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid25301/Release-notes-and-notices/Known-and-corrected-issues/","https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid25401/Release-notes-and-notices/Known-and-corrected-issues/","https://docs.helixops.ai/bin/Service-Management/On-Premises-Deployment/BMC-Helix-Service-Management-Deployment/brid26101/Release-notes-and-notices/Known-and-corrected-issues/"],"sources":[{"name":"CVE","id":"CVE-2026-113694","modified":"2026-10-29T13:51:08.903Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-113694"}],"assessments":[{"source":"NCSC","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","score":5.3}],"sourceAffected":[],"observedAt":"2026-10-29T14:11:20.762Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T09:15:31.262Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-10-29T14:00:32.184Z","attemptedAt":"2026-10-29T14:00:32.184Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-29T14:00:32.184Z","attemptedAt":"2026-10-29T14:00:32.184Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T14:00:32.196Z","attemptedAt":"2026-10-29T14:00:32.196Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-29T14:00:32.196Z","attemptedAt":"2026-10-29T14:00:32.196Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-112824","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112824","modified":"Oct 29, 2026, 1:51:08 PM","score":5.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","checkedAt":"2026-10-29T14:00:32.196Z"}],"aiSummary":{"text":"BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 have an improper authorization weakness, allowing authenticated users to access or modify other users' attachment resources. The weakness is in the SmartIT user attachment feature. Authenticated access is required to exploit this weakness.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:17:07.614Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-113694"}]}}