What is GHSA-hg4r-cv5p-h5cm?

GHSA-hg4r-cv5p-h5cm is a security advisory published by GitHub Security Advisories with Critical severity. HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability...

Which CVE IDs does GHSA-hg4r-cv5p-h5cm cover?

GHSA-hg4r-cv5p-h5cm covers the following CVE IDs: CVE-2026-67101. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hg4r-cv5p-h5cm?

GHSA-hg4r-cv5p-h5cm has a CVSS v3 base score of 9.3, published by GitHub Security Advisories.

GHSA-hg4r-cv5p-h5cmCriticalCVSS 9.3

HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-67101 →

📋 Description

HCL BigFix Service Management is affected by a Server-Side Request Forgery (SSRF) vulnerability in its search functionality, which could allow an attacker to force the application server to send requests to internal systems that are not accessible from the internet.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-67101
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133782
https://github.com/advisories/GHSA-hg4r-cv5p-h5cm