What’s Vulnerable › Vulnerabilities

CVE-2020-36926: SmarterTools SmarterTrack 7922 -Information Disclosure

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-16 · updated 2026-06-17
• Weakness: CWE-497

Description

SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details. Attackers can access the vulnerable /Management/Chat/frmChatSearch.aspx endpoint to retrieve agents' first and last names along with their unique identifiers.

Affected products

• SmarterTools SmarterTrack: 10.0, 14.0

References

• https://www.exploit-db.com/exploits/50328
• https://www.smartertools.com/
• https://www.smartertools.com/smartertrack
• https://www.vulncheck.com/advisories/smartertools-smartertrack-information-disclosure
• https://www.exploit-db.com/exploits/50328

Get alerted when CVE-2020-36926 or the next vulnerability affects your stack