Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-67074

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability

Risk score
55/100
CVSS
9.1 v3.1
Published
28 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 9.1 critical

References

Original description

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.

Last activity 28 Oct 2026. Patch Forecast updates every hour.