CVE-2026-67106

MEDIUMCVSS 5.3

Description

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks.

Timeline

Published:October 1st, 2026 3:17 PM

Last modified:October 5th, 2026 5:25 PM

CVSS Scoring

CVSS v3: 5.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Software

From NVD CPE configuration data

Vendors

hcltech

Products

bigfix_service_management

Weaknesses (CWE)

CWE-200 CWE-209

References & Reports

Advisories, patches, and third-party reports

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015Vendor Advisory

Source: NIST NVD · Data may lag official sources by up to one minute