CVE-2026-67073High· 8.6▾ TwilightHCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, poten…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 47.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized access, or system compromise.
bigfix_aex v13.0.0.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-67074Critical· 9.1HCL BigFix AEX is affected by multiple security vulnerabilities.
CVE-2026-67080Medium· 6.5HCL BigFix AEX is affected by multiple security vulnerabilities.
CVE-2026-67079Medium· 6.4HCL BigFix AEX is affected by multiple security vulnerabilities.
CVE-2026-67077Medium· 4.2HCL BigFix AEX is affected by multiple security vulnerabilities.
CVE-2026-21830Low· 3.7HCL BigFix AEX is affected by multiple security vulnerabilities.
CVE-2025-14199Medium· 6.3A flaw has been found in Verysync 微力同步 up to 2.21.3