Is CVE-2026-21809 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-21809?

CVE-2026-21809 has a CVSS v3 severity of LOW (3.9).

Back

CVE-2026-21809

Description

HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input.