Is CVE-2026-85148 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85148?

CVE-2026-85148 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-85148

Description

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts.