Vulnerability in HCL Software BigFix AEX

[ Description ]Official description

HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the application to send unauthorized requests to external resources. Successful exploitation could lead to access to unintended services, sensitive information disclosure, or unauthorized actions through the affected application.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund28 Oct 2026WID-SEC-2026-4236

  HCL BigFix AEX: Multiple vulnerabilities Translated from German

  CVE-2026-67074CVE-2026-67080CVE-2026-67079+2 more CVEs

[ References ]References

• support.hcl-software.com/csm