CVE-2026-67101: bigfix service management 23, 27; +1 more affected products

Affected technology

bigfix service management · 23
hcltech

bigfix service management · 27
hcltech

HCL BigFix Service Management · V23
HCL Software

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An attacker could force the application server to send requests to internal systems that are not accessible from the internet. Vendor/CNA’s CVSS 3.1 assessment (base score 9.3/10) rates confidentiality impact as high; integrity impact as low; availability impact as none. NVD’s CVSS 3.1 assessment (base score 5.8/10) rates confidentiality and availability impact as none; integrity impact as low.