Vulnerability · Published Jan 15, 2026 · Assigned by VulnCheck
CVE-2020-36926SmarterTools SmarterTrack 7922 -Information Disclosure
High 7.5
In plain English
A high-severity security flaw in SmarterTools SmarterTrack from Smartertools. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 51.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details. Attackers can access the vulnerable /Management/Chat/frmChatSearch.aspx endpoint to retrieve agents' first and last names along with their unique identifiers.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Smartertools | SmarterTools SmarterTrack | 10.014.0 |
Weakness: CWE-497 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- ExploitDB-50328 exploit
- SmarterTools Official Homepage product
- SmarterTrack Product Page product
- VulnCheck Advisory: SmarterTools SmarterTrack 7922 -Information Disclosure third-party-advisory