Broken Access Control in HCL BigFix Service Management

CVE-2026-67102

What is CVE-2026-67102?

HCL BigFix Service Management is vulnerable to a Broken Access Control issue that can be exploited by users with low privileges. This vulnerability enables these users to bypass intended restrictions, granting unauthorized access to administrative functionalities and screens that should be reserved for higher-privileged accounts. This poses significant risks to the security posture of organizations utilizing this solution, as sensitive administrative settings could be altered or misused.

References