CVE-2026-67080

CVSS 6.5 (medium) · published 2026-10-28

HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional conditions. This could allow an attacker to obtain sensitive technical information, including stack traces, system details, or internal paths, potentially facilitating further attacks.

Weakness: CWE-209, CWE-391, CWE-755

Source: NVD CVE-2026-67080

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.