CVE-2026-85149
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Sep 04, 2026
Vendor
unknown
Description
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host.