CVE-2026-56597: bigfix service management 23, 27; +1 more affected products

Affected technology

bigfix service management · 23
hcltech

bigfix service management · 27
hcltech

HCL BigFix Service Management · v27
HCL Software

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated attacker could extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets. Vendor/CNA’s CVSS 3.1 assessment (base score 3.1/10) rates confidentiality impact as low; integrity and availability impact as none. NVD’s CVSS 3.1 assessment (base score 5.3/10) rates confidentiality impact as low; integrity and availability impact as none.