CVE-2026-67073: falha de alta gravidade em HCL Software BigFix AEX
HCL BigFix AEX is affected by multiple security vulnerabilities.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.6epss 0.2%
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized access, or system compromise.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Produtos afetados
HCL Software · BigFix AEXCVEs relacionadas — HCL Software BigFix AEX
No mesmo produto, das mais perigosas para as menos.
CVE-2026-67074CRITICALHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.5%CVE-2026-67080MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2026-21830LOWHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-67079MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2026-67077MEDIUMHCL BigFix AEX is affected by multiple security vulnerabilities.EPSS 0.1%