Insecure Communication Vulnerability in HCL BigFix Service Management
CVE-2026-67105

7.4HIGH

Key Information:

Vendor

HCL Software Software

Status
HCL Software Bigfix Service Management
Vendor
CVE Published:
1 October 2026

What is CVE-2026-67105?

HCL BigFix Service Management is vulnerable to insecure communication, allowing attackers with access to the internal network to intercept unencrypted HTTP traffic. This flaw enables unauthorized individuals to extract sensitive data and potentially carry out man-in-the-middle (MitM) attacks, posing significant risks to data confidentiality and integrity.

Affected Version(s)

HCL BigFix Service Management Version 27

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.