CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2025-31973 — HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecur...

·Source: NIST NVD

Updated:

Executive Summary

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabilities, potentially increasing the risk of exploitation in the application environment.

Analysis

HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'. Using outdated or insecure base images may introduce known vulnerabilities, potentially increasing the risk of exploitation in the application environment. CVSS Score: 4. Published: 2026-05-20T12:16:20.527.

Indicators of Compromise (1)

CVE (1)
CVE-2025-31973
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on May 20, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-9141 — Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication ...

Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web configuration interface that allows unauthenticated attackers to access internal application pages without any session management or server-side authentication checks. Attackers with network access can directly request internal resources such as index.zhtml, point.zhtml, and log

CVE-2026-9141
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-9139 — Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded crede...

Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is implemented entirely in client-side JavaScript in login.zhtml, exposing static plaintext credentials in the page source. Unauthenticated attackers with network access can recover administrative credentials directly from the client-s

CVE-2026-9139
NIST NVD
MEDIUMVulnerability

Mercury raises $200 million

Mercury, a provider of banking services for entrepreneurs and the tech industry, has raised $200 million in a Series D at a $5.2 billion valuation.

Finextra