Detections
Analytics
CVE-2026-108018
medium
Description
The BigFix MCM admin portal is directly accessible from the internet without VPN or network restriction. A client-side configuration file discloses non-sensitive environment details. Exposing the configuration file publicly increases the attack surface and the risk of unauthorized access attempts.
References
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135001