OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-67102

HIGH · CVSS 8.1 EPSS 0.35%

Source: NVD + CISA KEV + EPSS · Published 2026-09-18 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

HCL BigFix Service Management is susceptible to a high-severity Broken Access Control vulnerability that enables low-privileged users to access administrative screens and functions intended for higher-privileged roles. This flaw could lead to unauthorized actions within the system, potentially compromising sensitive data and administrative controls. Organizations using this software should prioritize remediation to mitigate the risk of privilege escalation and unauthorized access.

CVE
CVE-2026-67102
Severity
HIGH
CVSS
8.1
EPSS
0.35%

Original NVD Description

HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized access to administrative screens and functions reserved for higher-privileged roles.

Related CVEs

Other vulnerabilities affecting the same vendor(s)