CVE-2026-108018
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Nov 06, 2026
Vendor
unknown
Description
The BigFix MCM admin portal is directly accessible from the internet without VPN or network restriction. A client-side configuration file discloses non-sensitive environment details. Exposing the configuration file publicly increases the attack surface and the risk of unauthorized access attempts.