CVE-2026-113696

The BMC IT Service Management Suite (versions 25.3.01 , 25.4.01 , and 26.1.01 ) contains an improper authorization vulnerability in the SmartIT change approval feature. This flaw allows authenticated users to make unauthorized changes to the approval state and bypass intended restrictions. No spe...