CVE-2026-21765

# PowerShell PoC to check for weak permissions on BigFix keys $targetPath = 'C:\Program Files (x86)\BigFix Enterprise\BES Server\' if (Test-Path $targetPath) { Write-Host "Scanning $targetPath for private keys..." Get-ChildItem -Path $targetPath -Recurse -Include *.pem,*.key,*.p12 | ForEach-Object { $acl = Get-Acl -Path $_.FullName Write-Host "Checking: $($_.FullName)" $acl.Access | Where-Object { $_.FileSystemRights -match 'Read' -and $_.IdentityReference -notmatch 'BUILTIN\Administrators|SYSTEM' } | ForEach-Object { Write-Host "[!] Weak Permission Found: $($_.IdentityReference) has $($_.FileSystemRights)" -ForegroundColor Red } } } else { Write-Host "Path not found." }

{"cve": {"id": "CVE-2026-21765", "sourceIdentifier": "[email protected]", "published": "2026-04-02T00:16:23.953", "lastModified": "2026-04-16T16:07:39.550", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 2.0, "impactScore": 6.0}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.8, "impactScore": 5.9}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-276"}, {"lang": "en", "value": "CWE-732"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:hcltech:bigfix_platform:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.0.0", "versionEndIncluding": "11.0.5", "matchCriteriaId": "655B6D28-5486-4ACF-B28F-7346BFB377D0"}]}]}], "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129906", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}