BaselineWatch
Desk

CVE-2026-67074

9.1 critical Deferred

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 2

  1. StatusPublished → DeferredNVD modified 2026-10-28 14:05
  2. First seenCVSS 9.1 · hcl softwareNVD modified 2026-10-28 12:22

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 1