CVE-2026-67171

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information. This information could enable an attacker to facilitate targeted database attacks.

CVSS 3.1

5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-25)

CWEs

CWE-200, CWE-209

Published

2026-10-01

Modified

2026-10-06

Record from

the NVD, synced 2026-10-19

Affected

• hcltech:bigfix_service_management

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015

Check your stackJSON