CVE-2026-21767CWE-306

HCL BigFix Platform is affected by insufficient authentication

Medium · published April 1, 2026

CVSS v3.1
4.0
EPSS
0%
Percentile
1.4
In the wild
Unconfirmed
What it is

HCL BigFix Platform is affected by insufficient authentication.  The application might allow users to access sensitive areas of the application without proper authentication.

The record
Technical detail
CVSS v3.1
4.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00114 · 1.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-04-01T23:47Z
EPSS history
Timeline
  • 01 APR 23:47Z
    HCL BigFix Platform is affected by insufficient authentication
    cvelistv5