Vulnerability in HCL Software BigFix AEX

[ Description ]Official description

HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application within a malicious web page or iframe and trick users into performing unintended actions, potentially leading to unauthorized transactions or changes to their accounts.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund28 Oct 2026WID-SEC-2026-4236

  HCL BigFix AEX: Multiple vulnerabilities Translated from German

  CVE-2026-67074CVE-2026-67080CVE-2026-67079+2 more CVEs

[ References ]References

• support.hcl-software.com/csm