[BESAdmin-Announcements] BigFix WebUI: new release available (September 2026)

[Announcements for BES Administrators]

The HCL BigFix team announces a new release of WebUI.

The WebUI release addresses the following *Security Vulnerabilities*:

   - CVE-2026-42041, CVE-2026-42034, CVE-2026-42036, CVE-2026-42037,
   CVE-2026-42042, CVE-2026-42044, CVE-2026-42264, CVE-2026-44486,
   CVE-2026-44487, CVE-2026-44488, CVE-2026-44492, CVE-2026-44494,
   CVE-2026-44495, CVE-2026-44496, CVE-2026-44490 (axios)
   - CVE-2026-83605, CVE-2026-83606, CVE-2026-83607, CVE-2026-83608,
   CVE-2026-83609, CVE-2026-83612, CVE-2026-83613, CVE-2026-83614,
   CVE-2026-83615, CVE-2026-83616, CVE-2026-83618, CVE-2026-83619 (xmldom)
   - CVE-2026-44990,CVE-2026-53606 (sanitize-html), CVE-2026-14257,
   CVE-2026-13149 (brace-expansion)
   - CVE-2026-59869, CVE-2026-84375, CVE-2026-53550 (js-yaml),
   CVE-2026-48933, CVE-2026-48618 , CVE-2026-48615 (node.js)
   - CVE-2026-44705 (tmp), CVE-2026-12143 (form-data), CVE-2026-45623
   (postcss)
   - CVE-2026-5079, CVE-2026-5038 (multer)
   - CVE-2026-8159, CVE-2026-8161, CVE-2026-8162 (multiparty),
   CVE-2026-54606 (suneditor),
   - CVE-2026-8723 (qs), CVE-2026-73086 (nanoid), CVE-2026-48038 (joi)
   - CVE-2026-46625 (js-cookie)
   - CVE-2026-9277 (shell-quote)
   - CVE-2026-16221, CVE-2026-13676, CVE-2026-18446 (fast-uri)
   - CVE-2026-69152 (brace-expansion)
   - CVE-2026-54466 (websocket-driver)







This release addresses the following *Defect Articles*:·


   - KB0131725 - WebUI credits screen is out of date and not being kept up
   to date
   - KB0132096 – Customized WebUI banner displays incorrect lang attribute
   - KB0133733-  Devices not adding to patch policy correctly




*How to update*

WebUI will update automatically by default, unless configured otherwise.
Please note that updates for BigFix Insights must be done manually via the
Application Updates page on WebUI.

For more information, please see
https://help.hcltechsw.com/bigfix/11.0/webui/WebUI/Admin_Guide/c_manage_application_updates.html
.


* Published WebUI Site Versions *

WebUI Site Name                              Site Version

Application Administration                   41
Common                                             103
Custom                                                52
Patch                                                    55
Patch Policies                                       52
Profile Management                              35
Query                                                     46
Software Distribution.                             55
WebUI API                                              35
WebUI Content App                                29
WebUI Data Sync                                   38
WebUI Extensions                                  15
WebUI Framework                                  37
WebUI Permissions and Preferences     29
WebUI Insights                                        34
WebUI IVR                                               24
WebUI CMEP                                           23
WebUI SCM                                              21
WebUI Reports                                         25
WebUI Take Action                                  38


WebUI Documentation link:



https://help.hcltechsw.com/bigfix/11.0/webui/index.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20260930/00405c6c/attachment.html>