CyberSecBulletin

Lightstar vulnerabilities

We track 3 vulnerabilities in Lightstar products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.

3vulnerabilities
2critical
1high
0exploited
9.0average CVSS score

Latest Lightstar vulnerabilities

  • 9.8 Critical severity

    SmartIT Desktop Manager: Use of Hard-coded Credentials

    CVE-2026-85148Lightstar

    SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts.

  • 7.5 High severity

    SmartIT Desktop Manager: Improper Access Control

    CVE-2026-85147Lightstar

    SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain a specific password from the source code, which can be used to retrieve the AES encryption key used for communication.

  • 9.8 Critical severity

    SmartIT Desktop Manager: Use of Hard-coded Credentials

    CVE-2026-85146Lightstar

    SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SSH service account credentials and passwords for the SmartIT Agent directly from the application source code.