Lightstar vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Lightstar products: 4 record(s), with severity, exploitation and fixes.

SmartIT Desktop Manager 4

Exploited only (KEV) →

CVE-2026-85149 Medium · 5.3 CWE-798 Sep 4, 2026

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host.

CVE-2026-85148 Critical · 9.8 CWE-798 Sep 4, 2026

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts.

CVE-2026-85147 High · 7.5 CWE-284 Sep 4, 2026

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication.

CVE-2026-85146 Critical · 9.8 CWE-798 Sep 4, 2026

Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SSH service account credentials and passwords for the SmartIT Agent directly from the application source code.