Input Validation Issue in HCL BigFix Quantum Risk Analyzer
CVE-2026-21809

3.9LOW

Key Information:

Vendor
CVE Published:
26 August 2026

What is CVE-2026-21809?

HCL BigFix Quantum Risk Analyzer suffers from an input validation issue that can disclose overly descriptive error messages when processing malformed inputs. This vulnerability aids attackers by enabling them to conduct more precise reconnaissance, allowing for the optimization of their automated fuzzing tools to generate valid inputs effectively. Consequently, this can pose significant risks to security as it facilitates unauthorized access and exploitation.

Affected Version(s)

BigFix Quantum Risk Analyzer 2.0.1.47

References

CVSS V3.1

Score:
3.9
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.