CVE-2026-21840 — HCL BigFix Platform is affected by a user enumeration vulnerability

CVE-2026-21840

HCL BigFix Platform is affected by a user enumeration vulnerability PUBLISHED

Description (CNA)

HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful system control and response time monitoring, to perform some level of user enumeration for the BigFix service.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / HCL BigFix Platform	affected 10.0.0 - 10.0.15, 11.0.0 - 11.0.5

CWE

CWE-208

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132093

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.