PT-2026-29651 · Hcl · Hcl Bigfix Platform

Michele Spagnuolo · Published 2026-04-01 · Updated 2026-04-02 · CVE-2026-21765

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HCL BigFix Platform (affected versions not specified)

Description The HCL BigFix Platform is susceptible to a security issue involving insecure permissions on private cryptographic keys. Specifically, these keys, located on Windows host machines, may have overly permissive file system permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Incorrect Default Permissions

Weakness Enumeration

CWE-732

CWE-276

Related Identifiers

CVE-2026-21765

Affected Products

Hcl Bigfix Platform

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-21765 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129906 · Vendor Advisory
• https://twitter.com/cyberbivash/status/2039536654738681988 · Twitter Post
• https://twitter.com/CveFindCom/status/2039678008596766828 · Twitter Post
• https://twitter.com/TheHackerWire/status/2039523969498534336 · Twitter Post
• https://twitter.com/CVEarity/status/2039662276651950492 · Twitter Post
• https://twitter.com/CVEnew/status/2039647723100742067 · Twitter Post