CVE-2026-21809 — HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker …
Published: 2026-08-26 · CVSS: 3.9 · CVSS 3.1
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7