Loading story…
German government CERT advisories disclosed multiple vulnerabilities affecting the HCL BigFix Platform, with separate notices identifying security issues in the enterprise endpoint management product. The advisories indicate that more than one flaw was reported across BigFix components, expanding the scope of risk for organizations that rely on the platform for device management, patching, and compliance operations.
The notices provide limited public detail, but the repeated publication of advisories on HCL BigFix suggests ongoing remediation activity and a need for defenders to review vendor guidance, assess exposed BigFix infrastructure, and prioritize patch deployment. Organizations using BigFix should verify affected versions, apply available updates, and monitor administrative systems for signs of misuse while additional technical details remain sparse.
See real exploitation activity before you spend the cycle.
7 events from the most recent confirmed update back to the earliest known activity.
dCERT published advisory 2026-1519 for HCL BigFix describing a vulnerability that could allow manipulation of data and cross-site scripting. This is a new official disclosure affecting the HCL BigFix product line.
dCERT published advisory 2026-1415 covering multiple vulnerabilities in HCL BigFix WebUI Applications that could allow information disclosure. This is a new official disclosure affecting a specific HCL BigFix component.
dCERT published advisory 2026-1370 covering multiple vulnerabilities in HCL BigFix Service Management. This represents a new official disclosure affecting the HCL BigFix product ecosystem.
dCERT published advisory 2026-1194 for HCL BigFix, describing a vulnerability that could allow bypassing security measures and potentially enable privilege escalation. This appears to be a new official disclosure affecting the HCL BigFix product line.
dCERT published advisory 2026-1164 covering multiple vulnerabilities in HCL BigFix. This represents a separate advisory and likely an additional or updated disclosure affecting the product line.
dCERT published advisory 2026-0938 بشأن multiple vulnerabilities affecting the HCL BigFix Platform. The reference indicates a coordinated disclosure or notification of security issues in the product.
dCERT published advisory 2026-0543 covering multiple vulnerabilities in HCL BigFix. This represents an earlier official disclosure affecting the HCL BigFix product line.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
7 references tracked. Mallory keeps watching after this page renders.
dcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourcedcert.de
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
HCL disclosed two high-severity vulnerabilities affecting **HCL Aftermarket DPC** and the **HCL BigFix Platform**, with both issues exposing organizations to significant compromise risk. **CVE-2025-55261** affects HCL Aftermarket DPC and is described as **Missing Functional Level Access Control** (`CWE-284`), a flaw that could let an attacker escalate privileges, compromise the application, and steal or manipulate data. The issue carries a CVSS v3.1 vector of `AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H`, indicating network exposure with high impact to confidentiality and availability. HCL also reported **CVE-2026-21765** in the **HCL BigFix Platform**, where insecure permissions on private cryptographic keys stored on Windows hosts could expose sensitive keys to local users. The weakness maps to `CWE-276` and `CWE-732`, reflecting incorrect default permissions and improper permission assignment for critical resources, and received a CVSS v3.1 vector of `AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`. Together, the disclosures highlight risks from weak access controls and improperly protected cryptographic material in enterprise HCL software, with HCL directing customers to its support advisories for remediation details.
Jun 29, 2026
dCERT issued two advisories covering **multiple vulnerabilities** in **IBM App Connect Enterprise**, indicating ongoing security issues affecting the enterprise integration platform. The advisories, `2026-0874` and `2026-0987`, both identify IBM App Connect Enterprise as the impacted product, though no public synopsis was provided in the referenced notices. The repeated publication of advisories for the same IBM product suggests organizations using App Connect Enterprise should review the associated vendor and dCERT guidance, identify affected versions, and prioritize patching or other mitigations. Security teams should also assess exposure in environments where the platform handles critical application and data flows, as vulnerabilities in integration middleware can create broad operational and security risk.
Jun 29, 2026
Hitachi published security advisories for multiple Linux-based enterprise management products, including **Hitachi Ops Center Administrator**, **Hitachi Infrastructure Analytics Advisor**, **Hitachi Ops Center Analyzer**, **Hitachi Ops Center Analyzer viewpoint**, and **Hitachi Ops Center Viewpoint**. The advisories cover several vulnerabilities across the product line, including an open redirect flaw in Ops Center Administrator tracked as `CVE-2026-1166` and another vulnerability affecting Infrastructure Analytics Advisor and Ops Center Analyzer tracked as `CVE-2026-2072`. The Canadian Centre for Cyber Security alerted organizations to the disclosures and urged administrators to review Hitachi’s guidance, apply recommended mitigations, and install the necessary updates. The newer Hitachi advisory expands the affected scope to additional Analyzer and Viewpoint components, indicating that enterprises using Hitachi monitoring and management platforms should assess exposure across related products and prioritize patching.
Jun 29, 2026