CVE-2026-21848

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries.

Score

CVSS 3.1 5.0 Medium

Status

Analyzed - psirt@hcl.com

Published

2026-09-18

Last modified

2026-10-14

Weaknesses

CWE-284

Affected products

• Hcl Bigfix Service Management (Hcl Software)
• Bigfix Service Management (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133917