CVE-2026-67079: HCL BigFix AEX is affected by multiple security vulnerabilities.

Published Oct 28, 2026

Updated

HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.

Event History

Oct 28, 2026

CVE Published

via MITRE·12:25 PM

Data Sourced

via MITRE·12:25 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker needs to persuade a user to interact with HCL BigFix AEX while it is embedded in a malicious web page or iframe. The reported vector is network-based, requires low privileges, and does not require a separate user interaction beyond the victim being tricked into performing actions.

What could successful exploitation allow?

A successful clickjacking attack could cause users to perform unintended actions in HCL BigFix AEX. The described impacts include unauthorized transactions or changes to user accounts, with potential high confidentiality impact and low integrity and availability impact.

CVE-2026-67079: HCL BigFix AEX is affected by multiple security vulnerabilities.

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What could successful exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What could successful exploitation allow?