CVE-2026-67104

MEDIUMCVSS 5.3

Description

HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endpoints for further targeted exploitation.

Timeline

Published:October 1st, 2026 3:17 PM

Last modified:October 5th, 2026 5:24 PM

CVSS Scoring

CVSS v3: 5.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Software

From NVD CPE configuration data

Vendors

hcltech

Products

bigfix_service_management

Weaknesses (CWE)

CWE-200 CWE-798

References & Reports

Advisories, patches, and third-party reports

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015Vendor Advisory

Source: NIST NVD · Data may lag official sources by up to one minute