The HCL BigFix team announces a new release of all WebUI apps.
The WebUI release includes the following features:
Support for new Modern Client Management release 3.6
The WebUI release addresses the following Security Vulnerabilities:
CVE-2025-65945 (jws)
CVE-2025-13465, CVE-2026-2950, CVE-2026-4800 (lodash)
CVE-2026-25639,CVE-2026-40175, CVE-2025-62718 (axios)
CVE-2025-59465, CVE-2025-55132, CVE-2025-55130, CVE-2025-59466, CVE-2025-55131, CVE-2026-21637 (node.js)
CVE-2025-69873 (ajv)
CVE-2026-2359, CVE-2026-3304, CVE-2026-3520 (multer)
CVE-2026-26996, CVE-2026-27904 (minimatch)
CVE-2016-10744 (select2)
CVE-2026-4867 (path-to-regexp)
CVE-2026-34601 (xmldom)
CVE-2025-15633, CVE-2025-15634 (internal)
This release addresses the following Defect Articles:
KB0124399 - WebUI cannot deploy Fixlets with ID number too big
KB0124898 - WebUI - Deploy Package: Group relevance is ignored
KB0128917 - Allow PowerShell scripts in SWD WebUI actions
KB0129153 - Fix SSA app icons customization on MacOS
KB0129454 - Cannot add new roles to AWS plugin using the WebUI
How to update
WebUI will update automatically by default, unless configured otherwise.
Please note that updates for BigFix Insights must be done manually via the Application Updates page on WebUI.
For more information, please see Managing Application Updates.
Published WebUI Site Versions
Site Version, Site Name
40, Application Administration
101, Common
50, Custom
54, Patch
51, Patch Policies
33, Profile Management
45, Query
54, Software Distribution.
33, WebUI API
28, WebUI Content App
37, WebUI Data Sync
14, WebUI Extensions
35, WebUI Framework
29, WebUI MDM
27, WebUI Permissions and Preferences
32, WebUI Insights
23, WebUI IVR
22, WebUI CMEP
20, WebUI SCM
24, WebUI Reports
37, WebUI Take Action
WebUI Documentation link: