PT-2026-29654 · Hcl · Hcl Bigfix Platform

Published 2026-04-01 · Updated 2026-04-02 · CVE-2026-21767

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL BigFix Platform (affected versions not specified)

Description The HCL BigFix Platform is affected by insufficient authentication. The application may allow users to access sensitive areas without proper authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-21767

Affected Products

Hcl Bigfix Platform

References · 5

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129906 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21767 · Security Note
• https://twitter.com/cyberbivash/status/2039536561751036319 · Twitter Post
• https://twitter.com/CVEarity/status/2039665056238170561 · Twitter Post
• https://twitter.com/CVEnew/status/2039647722022846717 · Twitter Post