Skip to content
OpenAdvisories
Low · 3.1 CVE-2026-56595 EUVD-2026-82784GHSA-x4m7-q7pg-96vr

HCL BigFix Service Management is affected by multiple security vulnerabilities.

Published Sep 18, 2026 · Updated Sep 18, 2026 · Assigned by HCL

Description

HCL BigFix Service Management is affected by a CORS Misconfiguration vulnerability due to improperly validated origin headers, which could allow an attacker to craft a malicious web page that interacts with the vulnerable application, enabling unauthorized access to protected resources and restricted APIs on behalf of a victim.

Affected products

VendorProductAffectedFixed
HCL Software HCL BigFix Service Management v27 —

Advisories 1

References