CVE-2026-21809

Published: Aug 26, 2026Modified: Aug 28, 2026

3.9

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

Exploitability: 0.5 / Impact: 3.4

Source: psirt@hcl.com (Secondary)

Description

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input.

Related CWEs

CWE-209

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133289

Source: psirt@hcl.com

Timeline

No history available yet.