Skip to content
OpenAdvisories
Medium WID-SEC-2026-2394 3 CVEs

HCL BigFix (Service Management): Mehrere Schwachstellen ermöglichen Denial of Service

Published Jul 16, 2026 · Updated Jul 16, 2026 · de-DE

Vendor: HCL Software Product: BigFix Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL BigFix (Service Management) ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

BigFix ist eine Lösung zum Erkennen und Verwalten von physischen und virtuellen Endpunkten.

Vulnerabilities 3

  • High 8.7
    CVE-2026-2359

    Multer vulnerable to Denial of Service via resource exhaustion

    Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by dropping connection during file upload, potentially causing resource exhaustion. Use…

    expressjs multer multer npm
  • High 8.7
    CVE-2026-3304 Public exploit

    Multer vulnerable to Denial of Service via incomplete cleanup

    Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability in Multer prior to version 2.1.0 allows an attacker to trigger a Denial of Service (DoS) by sending malformed requests, potentially causing resource exhaustion. Users should up…

    expressjs multer multer npm
  • High 7.5
    CVE-2026-27904

    minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions

    minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs produce regexps with nested unbounded quantifiers (e.g.…

    isaacs minimatch katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm

Revision history

  1. #1

    Initiale Fassung

References