CVE-2026-21765 in BigFix Platform
Summary
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Responsible
HCL
Reservation
01/05/2026
Disclosure
04/02/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 354784 | HCL BigFix Platform File System permission assignment | 732 | Not defined | Not defined | CVE-2026-21765 |