CVE-2026-21840EPSS p13.9%

CVE-2026-21840CVE-2026-21840

Description

HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful system control and response time monitoring, to perform some level of user enumeration for the BigFix service.

Scoring

CVSS 3.1 ()
VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS0.24% probability of exploitation · percentile 13.9% · 2026-10-06T12:00:23Z
Last modified2026-07-15
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.