CVE-2026-671028.1HighCWE-285
HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL Software · HCL BigFix Service Management
Not in CISA KEV
0.3%probability of exploitation in the next 30 days
28th percentile
050100
Higher than 28% of scored CVEs
8.1HighCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized access to administrative screens and functions reserved for higher-privileged roles.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 18 Sep.
- HCL BigFix flaws expose tenant data and admin accountsSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.