Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-21809

HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed
Vendors
Hclsoftware
Products
Bigfix Quantum Risk Analyzer
CVE-2026-21810

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking

HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Hclsoftware
Products
Bigfix Quantum Risk Analyzer
CVE-2026-21807

HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow

HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed
Vendors
Hclsoftware
Products
Bigfix Quantum Risk Analyzer
CVE-2026-21808

HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information

HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Hclsoftware
Products
Bigfix Quantum Risk Analyzer