Unrestricted File Upload in HCL BigFix AEX

CVE-2026-67073

What is CVE-2026-67073?

HCL BigFix AEX is susceptible to an unrestricted file upload vulnerability, which allows attackers to upload malicious files without proper validation. Additionally, due to flawed access controls, unauthorized users may gain direct access to sensitive data and uploaded files. This can lead to significant risks including information disclosure and system compromise, making it imperative for organizations to secure their deployments of HCL BigFix AEX.

References