Is CVE-2026-21840 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-21840?

CVE-2026-21840 has a CVSS v3 severity of LOW (3.1).

Back

CVE-2026-21840

Description

HCL BigFix Platform is affected by a user enumeration vulnerability which might allow an attacker, through careful system control and response time monitoring, to perform some level of user enumeration for the BigFix service.