Paper/Archive/CVE-2026-67101

CVE-2026-67101

HCL Software HCL BigFix Service Management — HCL BigFix Service Management is affected by multiple security vulnerabilities.

EPSS 0.3%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 17.5.175 × 203.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to force the application server to send requests to internal systems that are not accessible from the internet.

Affected

ProductAffectedFixed inSource

HCL BigFix Service ManagementV23–CNA

Scores by source

HCL (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refsupport.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133782