Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-85149

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Lightstar
Products
Smartit Desktop Manager
CVE-2026-85148

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Lightstar
Products
Smartit Desktop Manager
CVE-2026-85147

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Lightstar
Products
Smartit Desktop Manager
CVE-2026-85146

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SSH service account credentials and passwords for the SmartIT Agent directly from the application source code.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Lightstar
Products
Smartit Desktop Manager