CVE-2026-67105 — HCL BigFix Service Management is affected by multiple security vulnerabilities.

CVE-2026-67105

HCL BigFix Service Management is affected by multiple security vulnerabilities. PUBLISHED

Description (CNA)

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle (MitM) attacks.

Affected (CNA)

Vendor / product	Versions
HCL Software / HCL BigFix Service Management	affected Version 27

CWE

CWE-319

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.