{"id":"CVE-2026-67074","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","summary":"HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system…","severity":"critical","cvss":9.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-94","CWE-78"],"vendor":"HCL Software","product":"BigFix AEX","affected":["bigfix_aex v13.0.0.1"],"published":"2026-10-28","updated":"2026-10-28","sourceUpdated":"2026-10-28T12:22:54.795Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-67074","references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281"}],"tags":["cve.org"],"ingestedAt":"2026-10-28T13:11:23.687Z","slug":"CVE-2026-67074","body":"## Overview\n\nHCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.\n\n## Affected\n\n- `bigfix_aex v13.0.0.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":50,"depthScoreParts":{"impact":50.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}