What is CVE-2026-21840?

CVE-2026-21840 is a low-severity vulnerability in Hclsoftware Hcl Bigfix Platform, classified under CWE-208. CVSS score: 3.1/10. Published 2026-07-14.

How severe is CVE-2026-21840?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in Hclsoftware Hcl Bigfix Platform

CVE-2026-21840

HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful system control and response time monitoring, to perform some level of user enumeration for the BigFix service.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Hclsoftware Hcl Bigfix Platform — versions 10.0.0 - 10.0.15, 11.0.0 - 11.0.5

Weakness classification (CWE)

CWE-208

References

psirt@hcl.com

Frequently asked questions

What is CVE-2026-21840?: CVE-2026-21840 is a low-severity vulnerability in Hclsoftware Hcl Bigfix Platform, classified under CWE-208. CVSS score: 3.1/10. Published 2026-07-14.
How severe is CVE-2026-21840?: Low severity. CVSS v3 base score is 3.1 out of 10.