CVE-2026-67100

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management (affected versions not specified)

Description An authenticated attacker can exploit a SQL Injection flaw and a Cross-Tenant Data Exposure flaw. These issues allow the injection of database commands to extract sensitive system details and the manipulation of request values to gain unauthorized access to full personal profile data and Personally Identifiable Information (PII) across different organizations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.