---
id: "CVE-2026-67080"
kind: "vulnerability"
aliases: ["CVE-2026-67080"]
title: "HCL BigFix AEX: error handling leaks stack traces and internal paths"
severity: "medium"
cvss: 6.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["bigfix", "hcl", "vendor"]
not_affected_if: []
published_at: "2026-10-28T13:17:08+00:00"
first_seen_at: "2026-10-28T13:33:01+00:00"
updated_at: "2026-10-28T13:34:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67080", "first_seen_at": "2026-10-28T13:33:01+00:00"}]
---

# HCL BigFix AEX: error handling leaks stack traces and internal paths

HCL BigFix AEX mishandles errors and exceptional conditions, so responses can expose stack traces, system details and internal paths. An attacker who triggers those errors gets technical information that could help plan further attacks.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-28T13:33:01+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-67080

## From the sources

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_