CVE-2026-67073: high-severity vulnerability in HCL Software BigFix AEX
HCL BigFix AEX is affected by multiple security vulnerabilities.
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.6epss 0.2%
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized access, or system compromise.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected products
HCL Software · BigFix AEXRelated CVEs — HCL Software BigFix AEX
In the same product, most dangerous first.
CVE-2026-67074CRITICALHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.5%CVE-2026-67080MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-21830LOWHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-67079MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-67077MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.1%