Live › vulnerability › CVE-2026-67074
Go to dashboardHCL BigFix AEX v13.0.0.1 has a remote code execution flaw (CVSS 9.1). It is reachable over the network but needs a high-privilege account. Code runs with the privileges of the AEX application or service. HCL fixed it in v14.0.0. No exploitation reported.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 13:33 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| BigFix AEX | vendor | v13.0.0.1 | v14.0.0 |
v13.0.0.1 is listed as affectedv14.0.0Upgrade BigFix AEX to v14.0.0 (HCL: upgrading older versions to v14.0.0 fixes it; HCL's AEX support team assists).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.
This page as .md · .json · in your agent: get_signal("CVE-2026-67074")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.