CVE-2026-108018 — BigFix Mobile affected by sensitive information disclosure

The BigFix MCM admin portal is directly accessible from the internet without a VPN or network restriction. A client-side configuration file discloses non-sensitive environment details, increasing the attack surface and the risk of unauthorized access attempts.