Search

HCL BigFix Multiple Vulnerabilities Remote Attack CVSS 5.3

CERT-Bund issued security advisory WID-SEC-2026-1186 informing of multiple vulnerabilities in HCL BigFix endpoint management software. Affected versions are HCL BigFix Service Management prior to version 26.0 and prior to version 27, running on Linux, UNIX, and Windows operating systems. The vulnerabilities carry a CVSS Base Score of 5.3 (medium) and a Temporal Score of 4.6 (medium), with confirmed remote attack vector. An attacker can exploit these flaws to bypass security measures and disclose information.

HCL BigFix Platform Multiple Vulnerabilities

CERT-Bund issued a security advisory (WID-SEC-2026-0960) identifying multiple vulnerabilities in HCL BigFix Platform affecting versions prior to 11.0.6. The vulnerabilities carry a CVSS Base Score of 8.8 (high) and a Temporal Score of 7.7 (high). Local attackers can exploit these flaws to bypass security mechanisms and disclose sensitive information. Mitigation measures are available.