CVE-2026-21765
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.
Published Apr 2, 2026 · updated Jun 17, 2026 · hcltech bigfix platform
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 2, 2026 · NIST NVD
Detected
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.
Jun 17, 2026 · NIST NVD
Updated
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.
Affected
- cpe hcltech/bigfix platformversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-21765
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-21765
HCL BigFix Platform is affected by insecure permissions on private cryptographic keys. The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.
nvd.nist.gov