VulDB 🛡@vuldb
🚨 Some increased actor activities are shown targeting HCL BigFix Platform (CVE-2026-108013) vuldb.com/vuln/426074/cti https://t.co/EEvkOnEXef
0000099
2.3K followersView on X
CVE-2026-108013
LOWCVSS 6.8 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with files downloaded by the application. The issue is resolved by using bundle version 2026/10/20 or later. The fixed bundle is available starting from BES Support v1520.
0.0/ 10 priority
Sources & remediation
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day