CVE-2026-21808: Hclsoftware Bigfix Quantum Risk Analyzer

Medium severity, CVSS 4.1. EPSS: 0.1% chance of exploitation in the next 30 days.

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details.

Affected products

• Hclsoftware Bigfix Quantum Risk Analyzer: version 2.0.1.47 only

Published 2026-08-26. Last modified 2026-08-28.