CVE-2026-67077: medium-severity vulnerability in HCL Software BigFix AEX
HCL BigFix AEX is affected by multiple security vulnerabilities.
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.2epss 0.1%
HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or unauthorized actions through the affected application.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected products
HCL Software · BigFix AEXRelated CVEs — HCL Software BigFix AEX
In the same product, most dangerous first.
CVE-2026-67074CRITICALHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.5%CVE-2026-67080MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-21830LOWHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-67073HIGHHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-67079MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%