CRITICAL 9.8 NVD

CVE-2026-67100

HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attack

HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extract sensitive system details, as well as manipulate request values to gain unauthorized access to full personal profile data and PII across different organizations.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133782

Published: 2026-09-18 · Source: NVD · Feed updated: 2026-09-18

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-09-18 via NVD.

Risk Timeline

CVE Disclosed2026-09-18 · -1 days ago

Remediation Resources

Official Advisory

support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133782

vulnfeed aggregates 14468 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.