HCL BigFix Platform Multiple Vulnerabilities

CERT-Bund published advisory WID-SEC-2026-0960 detailing multiple security vulnerabilities in HCL BigFix Platform (versions below 11.0.6). The vulnerabilities carry a CVSS Base Score of 8.8 and Temporal Score of 7.7, classified as high severity. Local attackers can exploit these flaws to circumvent security controls and expose information. Affected platforms include Windows, Linux, and UNIX operating systems. Remote attack is not applicable for these vulnerabilities.

Organizations using HCL BigFix should immediately verify their current version and apply available patches to upgrade to version 11.0.6 or later. Given that mitigation measures are confirmed available, security teams should prioritize updating affected endpoints and verify that the patches address the specific vulnerability chain enabling security bypass and information disclosure. No specific compliance deadline is stated in the advisory.