CVE-2026-21806

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management (affected versions not specified)

Description An Administrative Session Concurrency issue exists where the application permits multiple simultaneous authenticated sessions for a single administrative account. This flaw could allow an unauthorized attacker to predict or hijack valid session identifiers, leading to the compromise of administrative sessions and the execution of actions with full privileged user permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.