---
id: CVE-2026-67080
title: HCL BigFix AEX is affected by multiple security vulnerabilities.
summary: >-
  HCL BigFix AEX is affected by an Information Disclosure vulnerability due to
  improper handling of errors or exceptional conditions. This could allow an
  attacker to obtain sensitive technical information, including stack traces,
  system de…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-209
  - CWE-391
  - CWE-755
vendor: HCL Software
product: BigFix AEX
affected:
  - bigfix_aex v13.0.0.1
published: '2026-10-28'
updated: '2026-10-28'
sourceUpdated: '2026-10-28T12:25:19.455Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-67080'
references:
  - url: >-
      https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281
tags:
  - cve.org
ingestedAt: '2026-10-28T13:11:23.685Z'
---

## Overview

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.

## Affected

- `bigfix_aex v13.0.0.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.