Skip to content
OpenAdvisories
Low · 3.9 CVE-2026-21809 EUVD-2026-66757GHSA-5frw-h466-x38v

HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information

Published Aug 26, 2026 · Updated Aug 27, 2026 · Assigned by HCL

Description

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input.

Affected products

VendorProductAffectedFixed
HCLSoftware BigFix Quantum Risk Analyzer 2.0.1.47 —

References