Vulnerability Details CVE-2026-21848
HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 4.9%
CVSS Severity
CVSS v3 Score 5.0
Products affected by CVE-2026-21848
-
cpe:2.3:a:hcltech:bigfix_service_management:23
-
cpe:2.3:a:hcltech:bigfix_service_management:27