CVE-2026-67105EPSS p4.0%
CVE-2026-67105CVE-2026-67105
hcltech / bigfix_service_management
Description
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle (MitM) attacks.
Scoring
| CVSS | 7.4 () |
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
| EPSS | 0.15% probability of exploitation · percentile 4.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-10-05 |