Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2026-21848

HCL BigFix Service Management is affected by multiple security vulnerabilities.

Description

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software HCL BigFix Service Management

Default version status: unaffected

  • V23affected

References