3.9Low

CVE-2026-21807HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow

HCLSoftware BigFix Quantum Risk Analyzer Published: (2 months ago)

Description

HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow.

Weakness (CWE): CWE-121

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
HCLSoftware BigFix Quantum Risk Analyzer 2.0.1.47

References and patches