{"affected":[{"defaultStatus":"unaffected","product":"BigFix AEX","source":"CNA: HCL","vendor":"HCL Software","versions":[{"status":"affected","version":"v13.0.0.1"}]}],"cveId":"CVE-2026-67074","cwes":["CWE-94","CWE-78"],"description":"HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise.","epss":{"date":"2026-11-06","percentile":0.39825,"score":0.00457},"exploits":[],"kev":null,"metrics":[{"score":9.1,"severity":"critical","source":"CNA: HCL","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793990210186,"publishedAt":1793190174795,"references":[{"source":"CNA: HCL","tags":[],"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0134281"}],"remediation":[],"revision":"5bfdcc9d3c2c1c0d791c1ee938fdcdfd88f77118b706eaeca1a28510bb7ee531","sources":[{"modifiedAt":1793990210186,"name":"CNA: HCL","retrievedAt":1793992347042,"url":"https://www.cve.org/CVERecord?id=CVE-2026-67074"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793992357795,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-67074"}],"ssvc":{"assessedAt":1793988941487,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"HCL BigFix AEX is affected by multiple security vulnerabilities.","updatedAt":1793992357795}