CVE-2026-21810: fallo de gravedad media en HCLSoftware BigFix Quantum Risk Analyzer
HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.4epss 0.1%
HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Productos afectados
HCLSoftware · BigFix Quantum Risk AnalyzerCVEs relacionadas — HCLSoftware BigFix Quantum Risk Analyzer
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-21808MEDIUMHCL BigFix Quantum Risk Analyzer is affected by logging sensitive informationEPSS 0.1%CVE-2026-21807LOWHCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflowEPSS 0.1%CVE-2026-21809LOWHCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive informationEPSS 0.1%