CVE-2026-67171

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information. This information could enable an attacker to facilitate targeted database attacks.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - psirt@hcl.com

Published

2026-10-01

Last modified

2026-10-06

Weaknesses

CWE-200, CWE-209

Affected products

• Hcl Bigfix Service Management (Hcl Software)
• Bigfix Service Management (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015