SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details. Attackers can access the vulnerable /Management/Chat/frmChatSearch.aspx endpoint to retrieve agents' first and last names along with their unique identifiers.

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Smartertools
  • Smartertrack

No data.

No data.

References
Link Providers
https://www.exploit-db.com/exploits/50328 cve-icon cve-icon
https://www.smartertools.com/ cve-icon cve-icon
https://www.smartertools.com/smartertrack cve-icon cve-icon
https://www.vulncheck.com/advisories/smartertools-smartertrack-information-disclosure cve-icon cve-icon
History

Fri, 16 Jan 2026 14:15:00 +0000

Type Values Removed Values Added
First Time appeared Smartertools
Smartertools smartertrack
Vendors & Products Smartertools
Smartertools smartertrack

Thu, 15 Jan 2026 23:45:00 +0000

Type Values Removed Values Added
Description SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details. Attackers can access the vulnerable /Management/Chat/frmChatSearch.aspx endpoint to retrieve agents' first and last names along with their unique identifiers.
Title SmarterTools SmarterTrack 7922 -Information Disclosure
Weaknesses CWE-497
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published: 2026-01-15T23:25:33.221Z

Updated: 2026-01-15T23:25:33.221Z

Reserved: 2026-01-10T13:50:35.693Z

Link: CVE-2020-36926

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-01-16T00:16:18.820

Modified: 2026-01-16T15:55:12.257

Link: CVE-2020-36926

cve-icon Redhat

No data.