CVE-2026-67074
HCL Software BigFix AEX
- HCL Software BigFix AEX
- Critical
- CVSS 9.1
- No fixed version listed
Summary
HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.
From the CVE record.
What to do
No fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| HCL Software BigFix AEX | v13.0.0.1 | None listed |
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.1 (v3.1, scored by HCL)
- Weakness
- CWE-94: Improper Control of Generation of Code ('Code Injection'); CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- Vendor
- HCL Software, BigFix AEX
Timeline
- First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.