{"id":"CVE-2026-67074","published":"2026-10-28T13:17:08.463","lastModified":"2026-10-28T14:05:59.757","description":"HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-78","CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"HCL BigFix AEX suffers from a remote code execution vulnerability that allows attackers with high privileges to execute arbitrary code on the affected system, potentially leading to full system compromise.","exploitability":"Exploitation requires high privileges (PR:H) and no user interaction, but no public exploit is available yet.","blast_radius":"Successful exploitation could lead to unauthorized access, data exfiltration, or complete system takeover due to the high impact on confidentiality, integrity, and availability.","remediation":"Upgrade to HCL BigFix AEX version 9.5.20.16 or later, as patched by HCL in their security advisory for CVE-2026-67074.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","privilege-escalation","hcl-bigfix","aex","critical"],"model":"garnet-coder","analyzedAt":"2026-10-29T08:45:43.266Z"}}