CVE-2026-67104 — HCL BigFix Service Management is affected by multiple security vulnerabilities.

CVE-2026-67104

HCL BigFix Service Management is affected by multiple security vulnerabilities. PUBLISHED

Description (CNA)

HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, enabling the discovery of hidden administrative API endpoints for further targeted exploitation.

Affected (CNA)

Vendor / product	Versions
HCL Software / HCL BigFix Service Management	affected Version 27

CWE

CWE-200, CWE-798

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.