Security Advisory

CVE-2026-85149

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-04 02:35:59

Last updated 2026-09-04 18:25:32

Assigner twcert

CVSS score 6.9

State PUBLISHED

Description

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host.

← Browse all CVEs View on cve.org ↗