CVE-2026-67080

medium

Description

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112031

Details

Source: Mitre, NVD

Published: 2026-10-28

Updated: 2026-10-28

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.00336