CVE-2026-85147

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication.

  • Published Sep 4, 2026
  • CVSS 8.7 high
  • 0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-85147 at the National Vulnerability Database