Insecure Permissions Vulnerability in HCL BigFix Platform

CVE-2026-21765

What is CVE-2026-21765?

The HCL BigFix Platform is susceptible to a vulnerability that arises from insecure permissions assigned to private cryptographic keys. These keys, stored on Windows host machines, may be exposed due to overly permissive file system permissions. This situation can potentially allow unauthorized users access to sensitive cryptographic materials, thereby jeopardizing the security of the platform and associated data.

References