CVE-2026-67074: HCL BigFix AEX is affected by multiple security vulnerabilities.
Published Oct 28, 2026
·Updated
HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.
Affected Software
1 affected component
HCL BigFix AEX
Event History
Oct 28, 2026
CVE Published
via MITRE·12:22 PM
Data Sourced
via MITRE·12:22 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vector lists privileges required as high, so the attacker must already have high-level privileges before exploitation. No user interaction is required, and the attack can be performed over the network.
2
What could successful exploitation allow?
Successful exploitation may allow remote code execution with the privileges of the affected application or service. The reported impact includes high confidentiality, integrity, and availability impact, and the scope may extend beyond the vulnerable component.