CVE-2026-21767: Hcltech Bigfix Platform

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

HCL BigFix Platform is affected by insufficient authentication.  The application might allow users to access sensitive areas of the application without proper authentication.

Affected products

• Hcltech Bigfix Platform: from 11.0.0, up to and including 11.0.5

Published 2026-04-02. Last modified 2026-06-17.