Live › vulnerability › CVE-2026-67079
Go to dashboardHCL BigFix AEX can be embedded inside a malicious web page or iframe. An attacker can use that frame to trick a logged-in user into clicking actions they did not intend, such as changing account settings.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 13:33 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.
This page as .md · .json · in your agent: get_signal("CVE-2026-67079")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.