Security Advisory

CVE-2026-85147

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-04 02:32:40
Last updated 2026-09-04 18:25:43
Assigner twcert
CVSS score 8.7
State PUBLISHED

Description

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication.