CVE-2026-67073
CVE-2026-67073 · HCL BigFix AEX is affected by multiple security vulnerabilities.
This page contains facts from public vulnerability sources. Check the original advisory before updating.
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized access, or system compromise.
CVSS 8.6 · High · EPSS 0.2%
- Published
- Updated
Affected products and versions
bigfix aex
- Versions
- v13.0.0.1: Affected
No fix published