Vulnerability in HCL Software HCL BigFix Service Management

[ Description ]Official description

HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints . This information could enable an attacker to facilitate further attacks.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund1 Oct 2026WID-SEC-2026-3707

  HCL BigFix: Multiple vulnerabilities Translated from German

  CVE-2026-67106CVE-2026-56596CVE-2026-67171+7 more CVEs

[ References ]References

• support.hcl-software.com/csmVendor Advisory