Is CVE-2026-85149 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85149?

CVE-2026-85149 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-85149

Description

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host.