CVE-2026-67106

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attacker to launch further, more serious attacks.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - psirt@hcl.com

Published

2026-10-01

Last modified

2026-10-05

Weaknesses

CWE-200, CWE-209

Affected products

• Hcl Bigfix Service Management (Hcl Software)
• Bigfix Service Management (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015