Beveiligingsadvies

CVE-2026-21785

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-27 20:15:56
Laatst bijgewerkt 2026-05-28 13:13:55
Toegewezen door HCL
CVSS-score 4.0
Status PUBLISHED

Beschrijving

A misconfigured Content Security Policy (CSP) in HCL BigFix Remote Control Server WebUI (versions 10.1.0.0442 and earlier) fails to define directives without fallbacks, allowing attackers to bypass intended security restrictions and load unauthorized resources.