What’s Vulnerable › Vulnerabilities
CVE-2026-21808: HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information
- Severity: medium (CVSS 4.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-26 · updated 2026-08-28
- Weakness: CWE-532
Description
HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details.
Affected products
- HCLSoftware BigFix Quantum Risk Analyzer: 2.0.1.47
References
Get alerted when CVE-2026-21808 or the next vulnerability affects your stack