What is CVE-2026-21808?

CVE-2026-21808 is a medium-severity vulnerability in Hclsoftware Bigfix Quantum Risk Analyzer, classified under Insertion of Sensitive Information into Log File. CVSS score: 4.1/10. Published 2026-08-26.

How severe is CVE-2026-21808?

Medium severity. CVSS v3 base score is 4.1 out of 10.

Information disclosure in Hclsoftware Bigfix Quantum Risk Analyzer

CVE-2026-21808

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details.

CVSS v3 metric

CVSS v3 base score 4.1 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Hclsoftware Bigfix Quantum Risk Analyzer — versions 2.0.1.47

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

psirt@hcl.com

Frequently asked questions

What is CVE-2026-21808?: CVE-2026-21808 is a medium-severity vulnerability in Hclsoftware Bigfix Quantum Risk Analyzer, classified under Insertion of Sensitive Information into Log File. CVSS score: 4.1/10. Published 2026-08-26.
How severe is CVE-2026-21808?: Medium severity. CVSS v3 base score is 4.1 out of 10.