[vulnfeed] 2 critical CVEs — 2026-09-18 12:00 UTC
vulnfeed
Critical alert — 2026-09-18 13:05 UTC
2 new critical CVEs
in the last 5 hours — 2 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-67100CRITICAL
HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerab
HCL BigFix Service Management is affected by SQL Injection flaw and a Cross-Tenant Data Exposure flaw vulnerabilities. which could allow an authenticated attacker to inject database commands to extrac
CVSS 9.8
CVE-2026-67101CRITICAL
HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search
HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to force the application server to send reque
CVSS 9.3
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: