Server-Side Request Forgery Vulnerability in HCL BigFix AEX

CVE-2026-67077

What is CVE-2026-67077?

The HCL BigFix AEX is vulnerable to a server-side request forgery (SSRF) attack, which allows an attacker to manipulate the application to send unauthorized requests to external resources. This vulnerability can potentially be exploited to gain access to unintended services, leading to the disclosure of sensitive information or the ability to perform unauthorized actions within the application. It is crucial for users and administrators to apply necessary patches and follow security best practices to mitigate the risks associated with this vulnerability.

References