CVE-2026-67105

high

Description

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle (MitM) attacks.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134015

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90876

Details

Source: Mitre, NVD

Published: 2026-10-01

Updated: 2026-10-05

Risk Information

CVSS v2

Base Score: 7.1

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:N

Severity: High

CVSS v3

Base Score: 7.4

Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: High

EPSS

EPSS: 0.00155