CVE-2026-67101

CRITICALCVSS 9.3

Description

HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to force the application server to send requests to internal systems that are not accessible from the internet.

Timeline

Published:September 18th, 2026 8:17 AM

Last modified:September 21st, 2026 7:17 PM

CVSS Scoring

CVSS v3: 9.3 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Weaknesses (CWE)

CWE-918

References & Reports

Advisories, patches, and third-party reports

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133782

Source: NIST NVD · Data may lag official sources by up to one minute