Is CVE-2026-67172 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-67172?

CVE-2026-67172 has a CVSS v3 severity of LOW (3.7).

Back

CVE-2026-67172

Description

HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to certain API endpoints . This information could enable an attacker to facilitate further attacks.