Dashboard / CVE-2026-21767

CVE-2026-21767

LOW
INFO Priority: 0.00 BB Relevance: 32/100
Published: 2026-04-02 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: Low
I: None
A: None

Description

HCL BigFix Platform is affected by insufficient authentication.  The application might allow users to access sensitive areas of the application without proper authentication.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
hcltech bigfix_platform 11.0.0 – 11.0.5

References & Advisories (1)

Bug Bounty Relevance

32 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

3.3 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS — Exploitation Probability

0.12%
Raw Score 0.001160
Percentile 1.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00116
2026-10-28
0.00114

Intelligence Sources

nvd ref →

External Links