Security Advisory

CVE-2026-85146

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-04 02:31:41
Last updated 2026-09-04 18:25:48
Assigner twcert
CVSS score 9.8
State PUBLISHED

Description

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SSH service account credentials and passwords for the SmartIT Agent directly from the application source code.