by Kastro
Paper/Archive/CVE-2026-67074

CVE-2026-67074

HCL Software BigFix AEX — HCL BigFix AEX is affected by multiple security vulnerabilities.

EPSS 0.5%CVSS 9.1
critical.is priorityof 100
35
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 39.6.396 × 207.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.

Affected

ProductAffectedFixed inSource
BigFix AEXv13.0.0.1–CNA

Scores by source

HCL (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

refsupport.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281