CRITICAL 9.3 NVD

CVE-2026-67101

HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to fo

HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to force the application server to send requests to internal systems that are not accessible from the internet.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133782

Published: 2026-09-18 · Source: NVD · Feed updated: 2026-09-18

This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-09-18 via NVD.

Risk Timeline

CVE Disclosed2026-09-18 · -1 days ago

Remediation Resources

Official Advisory

support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133782

vulnfeed aggregates 14468 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.