CVE-2026-108013
BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose priv
CVSS
6.8
Medio
EPSS
0.2%
p5
KEV
—
Exploit Today
1
0-100
Publicado: 24 oct 2026 · Última mod.: 24 oct 2026
Sin historial EPSS suficiente todavía.
BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with files downloaded by the application. The issue is resolved by using bundle version 2026/10/20 or later. The fixed bundle is available starting from BES Support v1520.
Sin CVEs relacionados por CWE o producto.