CVE-2026-21767

MediumCVSS 4.0

Published: 02/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas without proper authentication.

Risk Assessment

Unauthorized users may gain access to sensitive functions or data, potentially compromising the confidentiality and integrity of the management platform.

Recommendation

Apply the security updates provided by HCL for BigFix Platform.

Other vulnerabilities in HCL BigFix Platform

CVE-2026-21840Low
HCL BigFix Platform is affected by a user enumeration vulnerability. An attacker, through careful system control and response time monitoring, can determine which users are registered with the BigFix service.

Original NVD description (English source)

HCL BigFix Platform is affected by insufficient authentication. The application might allow users to access sensitive areas of the application without proper authentication.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS