3.9Low
CVE-2026-21807HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow
Description
HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow.
Weakness (CWE):
CWE-121
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| HCLSoftware | BigFix Quantum Risk Analyzer | 2.0.1.47 |