CVE-2026-21765 - Vulnerability Analysis

Overview

HCL BigFix Platform contains insecure permissions on private cryptographic keys caused by overly permissive file system permissions on Windows host machines, letting attackers access sensitive cryptographic keys, exploit requires access to the host file system.

Severity & Score

Impact

Attackers can access private cryptographic keys, potentially leading to information disclosure or further system compromise.

Mitigation

Restrict file system permissions on private cryptographic keys to the minimum necessary.

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129906

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner